104.21.23.148 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:19:00
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:13:51

Type

Details

Datetime

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:19:00

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:13:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.23.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17496
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.23.148.			IN	A

;; AUTHORITY SECTION:
.			347	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:17:05 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 148.23.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.23.21.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
121.171.117.248	attack	Sep 29 00:21:07 vps691689 sshd[28228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.171.117.248 Sep 29 00:21:08 vps691689 sshd[28228]: Failed password for invalid user jeff from 121.171.117.248 port 44173 ssh2 Sep 29 00:25:52 vps691689 sshd[28329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.171.117.248 ...	2019-09-29 06:31:50
62.234.91.113	attack	Sep 28 22:04:45 venus sshd\[4379\]: Invalid user nader from 62.234.91.113 port 46472 Sep 28 22:04:45 venus sshd\[4379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.91.113 Sep 28 22:04:47 venus sshd\[4379\]: Failed password for invalid user nader from 62.234.91.113 port 46472 ssh2 ...	2019-09-29 06:15:10
107.174.170.159	attackspambots	Sep 28 12:01:06 hcbb sshd\[24002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.170.159 user=root Sep 28 12:01:09 hcbb sshd\[24002\]: Failed password for root from 107.174.170.159 port 33832 ssh2 Sep 28 12:05:18 hcbb sshd\[24389\]: Invalid user artifactory from 107.174.170.159 Sep 28 12:05:18 hcbb sshd\[24389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.170.159 Sep 28 12:05:20 hcbb sshd\[24389\]: Failed password for invalid user artifactory from 107.174.170.159 port 42990 ssh2	2019-09-29 06:13:58
13.58.253.103	attackbots	Sep 29 00:00:44 mail sshd\[3350\]: Invalid user qf from 13.58.253.103 port 54008 Sep 29 00:00:44 mail sshd\[3350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.58.253.103 Sep 29 00:00:46 mail sshd\[3350\]: Failed password for invalid user qf from 13.58.253.103 port 54008 ssh2 Sep 29 00:04:59 mail sshd\[25054\]: Invalid user tester from 13.58.253.103 port 39000 Sep 29 00:04:59 mail sshd\[25054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.58.253.103	2019-09-29 06:18:27
119.55.57.205	attack	Unauthorised access (Sep 28) SRC=119.55.57.205 LEN=40 TTL=49 ID=60844 TCP DPT=8080 WINDOW=28422 SYN Unauthorised access (Sep 27) SRC=119.55.57.205 LEN=40 TTL=49 ID=14056 TCP DPT=8080 WINDOW=28422 SYN	2019-09-29 06:24:12
104.40.4.51	attackspam	Sep 29 00:59:23 pkdns2 sshd\[1456\]: Invalid user dumitru from 104.40.4.51Sep 29 00:59:25 pkdns2 sshd\[1456\]: Failed password for invalid user dumitru from 104.40.4.51 port 29184 ssh2Sep 29 01:03:36 pkdns2 sshd\[1661\]: Invalid user chef from 104.40.4.51Sep 29 01:03:39 pkdns2 sshd\[1661\]: Failed password for invalid user chef from 104.40.4.51 port 29184 ssh2Sep 29 01:07:44 pkdns2 sshd\[1865\]: Invalid user guest from 104.40.4.51Sep 29 01:07:46 pkdns2 sshd\[1865\]: Failed password for invalid user guest from 104.40.4.51 port 29184 ssh2 ...	2019-09-29 06:26:20
37.139.16.227	attack	Sep 29 01:26:58 pkdns2 sshd\[2766\]: Invalid user mongodb from 37.139.16.227Sep 29 01:27:00 pkdns2 sshd\[2766\]: Failed password for invalid user mongodb from 37.139.16.227 port 36808 ssh2Sep 29 01:30:22 pkdns2 sshd\[2989\]: Invalid user layer from 37.139.16.227Sep 29 01:30:24 pkdns2 sshd\[2989\]: Failed password for invalid user layer from 37.139.16.227 port 46534 ssh2Sep 29 01:34:20 pkdns2 sshd\[3137\]: Invalid user ventura from 37.139.16.227Sep 29 01:34:22 pkdns2 sshd\[3137\]: Failed password for invalid user ventura from 37.139.16.227 port 56264 ssh2 ...	2019-09-29 06:41:46
128.199.173.127	attackspambots	2019-09-29T05:19:01.410748enmeeting.mahidol.ac.th sshd\[31397\]: Invalid user adminttd from 128.199.173.127 port 52449 2019-09-29T05:19:01.429769enmeeting.mahidol.ac.th sshd\[31397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.173.127 2019-09-29T05:19:03.380996enmeeting.mahidol.ac.th sshd\[31397\]: Failed password for invalid user adminttd from 128.199.173.127 port 52449 ssh2 ...	2019-09-29 06:37:14
138.117.109.103	attackspambots	Sep 28 11:59:56 lcprod sshd\[3342\]: Invalid user admin from 138.117.109.103 Sep 28 11:59:56 lcprod sshd\[3342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.109.103 Sep 28 11:59:57 lcprod sshd\[3342\]: Failed password for invalid user admin from 138.117.109.103 port 39895 ssh2 Sep 28 12:05:40 lcprod sshd\[3913\]: Invalid user koga from 138.117.109.103 Sep 28 12:05:40 lcprod sshd\[3913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.109.103	2019-09-29 06:17:11
40.117.190.148	attackbots	3389BruteforceFW22	2019-09-29 06:13:02
132.232.108.143	attack	Sep 29 00:22:07 root sshd[7724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.108.143 Sep 29 00:22:10 root sshd[7724]: Failed password for invalid user testing from 132.232.108.143 port 60540 ssh2 Sep 29 00:26:36 root sshd[7773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.108.143 ...	2019-09-29 06:35:18
3.86.228.234	attackbots	" "	2019-09-29 06:28:43
180.76.109.211	attackbotsspam	Sep 26 15:51:27 toyboy sshd[3485]: Invalid user ops from 180.76.109.211 Sep 26 15:51:27 toyboy sshd[3485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.109.211 Sep 26 15:51:29 toyboy sshd[3485]: Failed password for invalid user ops from 180.76.109.211 port 41998 ssh2 Sep 26 15:51:29 toyboy sshd[3485]: Received disconnect from 180.76.109.211: 11: Bye Bye [preauth] Sep 26 15:55:49 toyboy sshd[3666]: Invalid user admin from 180.76.109.211 Sep 26 15:55:49 toyboy sshd[3666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.109.211 Sep 26 15:55:51 toyboy sshd[3666]: Failed password for invalid user admin from 180.76.109.211 port 43790 ssh2 Sep 26 15:55:52 toyboy sshd[3666]: Received disconnect from 180.76.109.211: 11: Bye Bye [preauth] Sep 26 15:58:14 toyboy sshd[3787]: Invalid user pen from 180.76.109.211 Sep 26 15:58:14 toyboy sshd[3787]: pam_unix(sshd:auth): authentication failu........ -------------------------------	2019-09-29 06:42:48
77.247.110.203	attackspambots	\[2019-09-28 18:18:17\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.203:49626' - Wrong password \[2019-09-28 18:18:17\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-28T18:18:17.820-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="123456711",SessionID="0x7f1e1c3de2d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/49626",Challenge="16dee24d",ReceivedChallenge="16dee24d",ReceivedHash="883e4bc4e935e8388c22129fa0ac46c7" \[2019-09-28 18:18:54\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.203:52791' - Wrong password \[2019-09-28 18:18:54\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-28T18:18:54.665-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8765430",SessionID="0x7f1e1c3de2d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77	2019-09-29 06:32:52
223.111.184.10	attackspam	Sep 28 11:50:21 sachi sshd\[18233\]: Invalid user changeme from 223.111.184.10 Sep 28 11:50:21 sachi sshd\[18233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.111.184.10 Sep 28 11:50:23 sachi sshd\[18233\]: Failed password for invalid user changeme from 223.111.184.10 port 35528 ssh2 Sep 28 11:53:22 sachi sshd\[18518\]: Invalid user uClinux from 223.111.184.10 Sep 28 11:53:22 sachi sshd\[18518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.111.184.10	2019-09-29 06:21:22

Recently Reported IPs

104.21.23.145	104.21.23.156	104.21.23.15	104.21.23.155
104.21.68.203	104.21.23.16	104.21.23.158	104.21.23.161
104.21.23.172	104.21.23.162	104.21.23.157	104.21.23.17
104.21.23.176	104.21.23.173	104.21.68.206	104.21.23.189
104.21.23.178	104.21.23.184	174.45.37.206	104.21.23.19