23.99.128.104 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	RDP Bruteforce	2020-04-24 04:33:22

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 23.99.128.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;23.99.128.104.			IN	A

;; AUTHORITY SECTION:
.			160	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042301 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 24 04:33:18 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 104.128.99.23.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.128.99.23.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
221.150.226.133	attack	Unauthorized connection attempt detected from IP address 221.150.226.133 to port 3389 [T]	2020-08-09 21:55:56
160.119.41.68	attack	Email address rejected	2020-08-09 21:50:09
195.144.21.56	attackspam	Sent packet to closed port: 81	2020-08-09 22:10:55
113.12.172.228	attackbotsspam	20 attempts against mh-ssh on creek	2020-08-09 22:21:38
222.186.180.17	attackbotsspam	Aug 9 15:57:36 cosmoit sshd[26941]: Failed password for root from 222.186.180.17 port 9720 ssh2	2020-08-09 22:04:54
61.93.201.198	attackbotsspam	Aug 9 14:04:13 Ubuntu-1404-trusty-64-minimal sshd\[16716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.201.198 user=root Aug 9 14:04:15 Ubuntu-1404-trusty-64-minimal sshd\[16716\]: Failed password for root from 61.93.201.198 port 44600 ssh2 Aug 9 14:11:08 Ubuntu-1404-trusty-64-minimal sshd\[21906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.201.198 user=root Aug 9 14:11:10 Ubuntu-1404-trusty-64-minimal sshd\[21906\]: Failed password for root from 61.93.201.198 port 59002 ssh2 Aug 9 14:13:25 Ubuntu-1404-trusty-64-minimal sshd\[23350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.201.198 user=root	2020-08-09 22:18:55
203.142.81.166	attackspambots	2020-08-09T15:06:27.407653n23.at sshd[3955149]: Failed password for root from 203.142.81.166 port 34811 ssh2 2020-08-09T15:11:08.814136n23.at sshd[3958796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.81.166 user=root 2020-08-09T15:11:11.547465n23.at sshd[3958796]: Failed password for root from 203.142.81.166 port 40204 ssh2 ...	2020-08-09 21:45:09
211.219.252.190	attackbots	[MK-Root1] Blocked by UFW	2020-08-09 22:02:56
104.131.231.109	attackspam	Aug 9 15:46:16 hidden sshd[50912]: Failed password for hidden from 104.131.231.109 port 47204 ssh2 Aug 9 15:48:55 hidden sshd[57378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.231.109 user=root Aug 9 15:48:57 hidden sshd[57378]: Failed password for hidden from 104.131.231.109 port 36826 ssh2 Aug 9 15:51:34 hidden sshd[63909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.231.109 user=root Aug 9 15:51:36 hidden sshd[63909]: Failed password for hidden from 104.131.231.109 port 54680 ssh2	2020-08-09 21:52:56
178.128.88.244	attack	2020-08-09T14:13:24.412215+02:00 sshd[31277]: Failed password for root from 178.128.88.244 port 45530 ssh2	2020-08-09 21:48:08
5.196.8.72	attackbotsspam	SSH auth scanning - multiple failed logins	2020-08-09 21:50:37
104.140.143.21	attackspambots	Mail Rejected for No PTR on port 25, EHLO: 05902b0f.visionebook.buzz	2020-08-09 21:49:49
218.92.0.224	attack	Aug 9 15:59:33 nextcloud sshd\[32072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.224 user=root Aug 9 15:59:34 nextcloud sshd\[32072\]: Failed password for root from 218.92.0.224 port 11643 ssh2 Aug 9 15:59:40 nextcloud sshd\[32072\]: Failed password for root from 218.92.0.224 port 11643 ssh2	2020-08-09 22:01:40
147.135.253.94	attackbots	[2020-08-09 09:59:52] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:64483' - Wrong password [2020-08-09 09:59:52] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-09T09:59:52.486-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="606",SessionID="0x7f272030cb08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/64483",Challenge="23059a77",ReceivedChallenge="23059a77",ReceivedHash="a3dca17975994618ba57590e205e4e3e" [2020-08-09 10:04:29] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:61973' - Wrong password [2020-08-09 10:04:29] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-09T10:04:29.836-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="706",SessionID="0x7f27203c7888",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94 ...	2020-08-09 22:13:49
80.82.70.118	attack	Unauthorized connection attempt from IP address 80.82.70.118 on Port 3306(MYSQL)	2020-08-09 21:37:47

最近上报的IP列表

192.106.56.53	23.96.119.0	85.250.116.115	177.135.32.124
159.65.59.41	13.82.130.54	185.149.23.44	49.233.192.145
37.49.226.208	188.162.176.41	84.51.201.129	52.160.107.218
210.195.166.71	62.12.83.197	37.47.247.107	123.120.119.29
82.9.16.56	104.42.192.174	220.134.220.58	212.110.128.210