104.26.12.66 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.26.12.141	attack	From: "Amazon.com" Amazon account phishing/fraud - MALICIOUS REDIRECT UBE aimanbauk ([40.87.105.33]) Microsoft Spam link parg.co = 178.238.224.248 Contabo GmbH – BLACKLISTED MALICIOUS REDIRECT: - sum.vn = 104.26.12.141, 104.26.13.141, 172.67.73.189 Cloudflare – blacklisted see https://www.phishtank.com/phish_detail.php?phish_id=6360304 - amazon.verification.kozow.com = 94.249.167.244 GHOSTnet GmbH – blacklisted see https://transparencyreport.google.com/safe-browsing/search?url=http%3A%2F%2Famazon.verification.kozow.com%2F%3F16shop SPF fxamplwo395845.com = aspmx.l.google.com 108.177.15.26, 108.177.15.27 Google	2020-07-30 03:35:15

类型

评论内容

时间

104.26.12.141

attack

From: "Amazon.com" 
Amazon account phishing/fraud - MALICIOUS REDIRECT

UBE aimanbauk ([40.87.105.33]) Microsoft

Spam link parg.co = 178.238.224.248 Contabo GmbH – BLACKLISTED MALICIOUS REDIRECT:
-	sum.vn = 104.26.12.141, 104.26.13.141, 172.67.73.189 Cloudflare – blacklisted see https://www.phishtank.com/phish_detail.php?phish_id=6360304
-	amazon.verification.kozow.com = 94.249.167.244 GHOSTnet GmbH – blacklisted see https://transparencyreport.google.com/safe-browsing/search?url=http%3A%2F%2Famazon.verification.kozow.com%2F%3F16shop

SPF fxamplwo395845.com = aspmx.l.google.com 108.177.15.26, 108.177.15.27 Google

2020-07-30 03:35:15

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.26.12.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59302
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.26.12.66.			IN	A

;; AUTHORITY SECTION:
.			323	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 04:03:28 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 66.12.26.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.12.26.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
1.174.26.169	attack	Honeypot attack, port: 23, PTR: 1-174-26-169.dynamic-ip.hinet.net.	2019-08-19 03:52:14
103.28.2.60	attack	Aug 18 22:40:36 yabzik sshd[11528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.2.60 Aug 18 22:40:39 yabzik sshd[11528]: Failed password for invalid user fivem from 103.28.2.60 port 55932 ssh2 Aug 18 22:44:30 yabzik sshd[12560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.2.60	2019-08-19 03:55:43
139.99.62.10	attackspam	Aug 17 18:28:50 * sshd[26078]: Failed password for invalid user student01 from 139.99.62.10 port 42818 ssh2 Aug 17 18:39:46 * sshd[26271]: Failed password for invalid user yap from 139.99.62.10 port 45908 ssh2 Aug 17 18:44:33 * sshd[26404]: Failed password for invalid user test from 139.99.62.10 port 35672 ssh2 Aug 17 18:49:17 * sshd[26477]: Failed password for invalid user grey from 139.99.62.10 port 53674 ssh2 Aug 17 18:54:04 * sshd[26539]: Failed password for invalid user nagios from 139.99.62.10 port 43430 ssh2 Aug 17 18:58:54 * sshd[26607]: Failed password for invalid user shekhar from 139.99.62.10 port 33182 ssh2 Aug 17 19:03:46 * sshd[26730]: Failed password for invalid user jp from 139.99.62.10 port 51172 ssh2 Aug 17 19:08:29 * sshd[26829]: Failed password for invalid user nexus from 139.99.62.10 port 40952 ssh2 Aug 17 19:13:16 * sshd[26955]: Failed password for invalid user wp-user from 139.99.62.10 port 58962 ssh2 Aug 17 19:27:54 * sshd[27242]: Failed password for invalid user gh	2019-08-19 04:06:58
144.217.66.136	attack	Aug 18 21:34:45 h2177944 sshd\[7617\]: Invalid user suporte from 144.217.66.136 port 43704 Aug 18 21:34:45 h2177944 sshd\[7617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.66.136 Aug 18 21:34:48 h2177944 sshd\[7617\]: Failed password for invalid user suporte from 144.217.66.136 port 43704 ssh2 Aug 18 21:38:50 h2177944 sshd\[7719\]: Invalid user gentry from 144.217.66.136 port 35326 ...	2019-08-19 03:53:50
49.85.243.46	attackbotsspam	ylmf-pc	2019-08-19 03:50:28
45.125.65.96	attackspambots	2019-08-18T19:51:22.392745ns1.unifynetsol.net postfix/smtpd\[24485\]: warning: unknown\[45.125.65.96\]: SASL LOGIN authentication failed: authentication failure 2019-08-18T21:13:50.957881ns1.unifynetsol.net postfix/smtpd\[4138\]: warning: unknown\[45.125.65.96\]: SASL LOGIN authentication failed: authentication failure 2019-08-18T22:36:08.646450ns1.unifynetsol.net postfix/smtpd\[15429\]: warning: unknown\[45.125.65.96\]: SASL LOGIN authentication failed: authentication failure 2019-08-18T23:58:01.571989ns1.unifynetsol.net postfix/smtpd\[27415\]: warning: unknown\[45.125.65.96\]: SASL LOGIN authentication failed: authentication failure 2019-08-19T01:20:34.800132ns1.unifynetsol.net postfix/smtpd\[6456\]: warning: unknown\[45.125.65.96\]: SASL LOGIN authentication failed: authentication failure	2019-08-19 04:13:44
35.234.123.233	attackbots	2019-08-18T12:59:14Z - RDP login failed multiple times. (35.234.123.233)	2019-08-19 03:48:17
141.98.9.205	attackbotsspam	Aug 18 19:03:50 relay postfix/smtpd\[13856\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 18 19:04:28 relay postfix/smtpd\[25531\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 18 19:04:52 relay postfix/smtpd\[29689\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 18 19:05:30 relay postfix/smtpd\[2979\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 18 19:05:54 relay postfix/smtpd\[13858\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-08-19 03:58:40
58.96.89.121	attackspambots	Sql/code injection probe	2019-08-19 04:02:48
43.239.176.113	attackspambots	Aug 18 14:59:04 vps01 sshd[6172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.239.176.113 Aug 18 14:59:06 vps01 sshd[6172]: Failed password for invalid user kitty from 43.239.176.113 port 43439 ssh2	2019-08-19 03:56:30
106.12.76.97	attack	Aug 18 17:17:59 server sshd\[12041\]: Invalid user doughty from 106.12.76.97 port 33320 Aug 18 17:17:59 server sshd\[12041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.76.97 Aug 18 17:18:01 server sshd\[12041\]: Failed password for invalid user doughty from 106.12.76.97 port 33320 ssh2 Aug 18 17:23:18 server sshd\[29779\]: Invalid user sysop123 from 106.12.76.97 port 45386 Aug 18 17:23:18 server sshd\[29779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.76.97	2019-08-19 04:28:38
90.150.84.244	attackbots	Honeypot attack, port: 445, PTR: adsl-90-150-84-244.salekhard.ru.	2019-08-19 03:47:49
117.239.199.130	attack	Invalid user ubuntu from 117.239.199.130 port 60483	2019-08-19 04:01:30
113.140.10.30	attackspam	Reported by AbuseIPDB proxy server.	2019-08-19 04:31:02
80.211.249.106	attackbots	Aug 18 04:22:41 tdfoods sshd\[30181\]: Invalid user wedding from 80.211.249.106 Aug 18 04:22:41 tdfoods sshd\[30181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.249.106 Aug 18 04:22:43 tdfoods sshd\[30181\]: Failed password for invalid user wedding from 80.211.249.106 port 41904 ssh2 Aug 18 04:27:05 tdfoods sshd\[30576\]: Invalid user simulator from 80.211.249.106 Aug 18 04:27:05 tdfoods sshd\[30576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.249.106	2019-08-19 03:56:08

最近上报的IP列表

104.26.12.69	104.26.12.71	104.26.12.70	104.26.12.72
104.26.12.68	104.26.12.7	104.26.12.73	104.26.12.74
104.26.12.75	104.26.12.76	104.26.12.79	104.26.12.77
104.26.12.78	104.26.12.81	104.26.12.83	104.26.12.82
104.26.12.8	104.26.12.84	104.26.12.80	104.26.12.89