104.21.2.28 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:19:00
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:13:51

Type

Details

Datetime

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:19:00

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:13:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.2.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60975
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.2.28.			IN	A

;; AUTHORITY SECTION:
.			134	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 18:42:47 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 28.2.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 28.2.21.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.98.26.182	attack	Sep 11 07:59:23 *** sshd[17330]: User root from 218.98.26.182 not allowed because not listed in AllowUsers	2019-09-11 16:02:43
189.45.42.150	attackspambots	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-09-11 15:54:16
104.236.124.249	attackspambots	Sep 11 10:53:58 server sshd\[3021\]: Invalid user ftpuser from 104.236.124.249 port 36492 Sep 11 10:53:58 server sshd\[3021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.249 Sep 11 10:54:00 server sshd\[3021\]: Failed password for invalid user ftpuser from 104.236.124.249 port 36492 ssh2 Sep 11 10:59:17 server sshd\[22524\]: Invalid user 29 from 104.236.124.249 port 39154 Sep 11 10:59:17 server sshd\[22524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.249	2019-09-11 16:07:36
178.161.255.124	attackbots	2019-09-11 00:51:48 H=(lr-net.it) [178.161.255.124]:51127 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/178.161.255.124) 2019-09-11 00:51:48 H=(lr-net.it) [178.161.255.124]:51127 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/178.161.255.124) 2019-09-11 00:51:50 H=(lr-net.it) [178.161.255.124]:51127 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-11 16:01:41
218.4.250.102	attackspam	Sep 10 17:46:07 lcprod sshd\[13643\]: Invalid user . from 218.4.250.102 Sep 10 17:46:07 lcprod sshd\[13643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.4.250.102 Sep 10 17:46:09 lcprod sshd\[13643\]: Failed password for invalid user . from 218.4.250.102 port 47874 ssh2 Sep 10 17:50:45 lcprod sshd\[14029\]: Invalid user Password from 218.4.250.102 Sep 10 17:50:45 lcprod sshd\[14029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.4.250.102	2019-09-11 15:54:59
51.91.252.1	attackbots	Sep 11 10:16:28 SilenceServices sshd[24941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.252.1 Sep 11 10:16:30 SilenceServices sshd[24941]: Failed password for invalid user owncloud from 51.91.252.1 port 50878 ssh2 Sep 11 10:22:20 SilenceServices sshd[27145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.252.1	2019-09-11 16:33:29
58.118.188.6	attackspam	Sep 11 11:10:08 yabzik sshd[21941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.118.188.6 Sep 11 11:10:10 yabzik sshd[21941]: Failed password for invalid user 1234 from 58.118.188.6 port 37848 ssh2 Sep 11 11:15:37 yabzik sshd[23862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.118.188.6	2019-09-11 16:31:22
218.65.230.163	attack	Sep 11 09:59:13 [munged] sshd[13350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.65.230.163	2019-09-11 16:12:08
141.98.9.42	attack	Sep 11 09:59:24 webserver postfix/smtpd\[3824\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 10:00:19 webserver postfix/smtpd\[3824\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 10:01:13 webserver postfix/smtpd\[3476\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 10:02:05 webserver postfix/smtpd\[3824\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 10:03:00 webserver postfix/smtpd\[3824\]: warning: unknown\[141.98.9.42\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-11 16:15:57
167.114.21.253	attack	Sep 11 09:57:41 meumeu sshd[28238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.21.253 Sep 11 09:57:44 meumeu sshd[28238]: Failed password for invalid user postgres from 167.114.21.253 port 52254 ssh2 Sep 11 10:03:13 meumeu sshd[29090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.21.253 ...	2019-09-11 16:10:03
112.64.32.118	attackbotsspam	Sep 11 08:11:25 hb sshd\[19492\]: Invalid user 1234 from 112.64.32.118 Sep 11 08:11:25 hb sshd\[19492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 Sep 11 08:11:28 hb sshd\[19492\]: Failed password for invalid user 1234 from 112.64.32.118 port 46082 ssh2 Sep 11 08:15:37 hb sshd\[19919\]: Invalid user user123 from 112.64.32.118 Sep 11 08:15:37 hb sshd\[19919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118	2019-09-11 16:32:22
142.93.117.249	attack	Sep 11 10:15:51 pornomens sshd\[9738\]: Invalid user dev from 142.93.117.249 port 53062 Sep 11 10:15:51 pornomens sshd\[9738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.117.249 Sep 11 10:15:52 pornomens sshd\[9738\]: Failed password for invalid user dev from 142.93.117.249 port 53062 ssh2 ...	2019-09-11 16:25:34
42.176.129.32	attackspam	Wed, 2019-08-07 16:10:27 - TCP Packet - Source:42.176.129.32,44217 Destination:,80 - [DVR-HTTP rule match]	2019-09-11 16:39:03
162.144.42.147	attackspambots	xmlrpc attack	2019-09-11 15:53:57
96.19.3.46	attackbotsspam	Sep 11 01:43:44 ny01 sshd[32296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.19.3.46 Sep 11 01:43:46 ny01 sshd[32296]: Failed password for invalid user test from 96.19.3.46 port 57816 ssh2 Sep 11 01:50:14 ny01 sshd[1008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.19.3.46	2019-09-11 15:56:43

Recently Reported IPs

104.21.2.26	104.21.2.29	89.209.241.208	104.21.2.33
104.21.2.35	104.21.2.36	104.21.2.37	73.249.41.162
104.21.2.39	104.21.2.43	104.21.2.5	104.21.2.53
104.21.2.54	167.67.241.104	104.21.2.55	104.21.2.56
104.21.2.57	200.46.118.93	69.54.97.222	104.21.2.58