104.21.45.162 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.45.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.45.162.			IN	A

;; AUTHORITY SECTION:
.			236	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:10:40 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 162.45.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 162.45.21.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
58.152.108.108	attack	Automatic report - Port Scan Attack	2019-11-15 00:42:26
144.208.127.22	attackbotsspam	3389	2019-11-15 00:38:12
78.187.200.181	attackbots	Unauthorised access (Nov 14) SRC=78.187.200.181 LEN=52 TTL=111 ID=25244 DF TCP DPT=1433 WINDOW=8192 SYN	2019-11-15 01:00:00
50.115.123.52	attackbots	Unauthorised access (Nov 14) SRC=50.115.123.52 LEN=40 TTL=239 ID=41108 TCP DPT=1433 WINDOW=1024 SYN Unauthorised access (Nov 13) SRC=50.115.123.52 LEN=40 TTL=239 ID=6016 TCP DPT=445 WINDOW=1024 SYN	2019-11-15 00:31:05
180.96.69.215	attack	Nov 14 05:50:11 auw2 sshd\[23607\]: Invalid user server from 180.96.69.215 Nov 14 05:50:11 auw2 sshd\[23607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.96.69.215 Nov 14 05:50:14 auw2 sshd\[23607\]: Failed password for invalid user server from 180.96.69.215 port 46198 ssh2 Nov 14 05:55:32 auw2 sshd\[24186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.96.69.215 user=root Nov 14 05:55:34 auw2 sshd\[24186\]: Failed password for root from 180.96.69.215 port 56810 ssh2	2019-11-15 00:55:23
104.248.163.158	attack	Masscan Port Scanning Tool PA	2019-11-15 00:53:57
160.16.239.19	attackspam	Automatic report - XMLRPC Attack	2019-11-15 00:29:18
138.232.8.48	attackspambots	From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] DCU phishing/fraud; illicit use of entity name/credentials/copyright. Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48 Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect: - northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc. Appear to redirect/replicate valid DCU web site: - Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid - Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon	2019-11-15 00:39:14
68.183.187.9	attackbots	Automatic report - XMLRPC Attack	2019-11-15 01:04:23
111.231.54.33	attack	SSH Brute-Force reported by Fail2Ban	2019-11-15 00:44:34
45.143.221.15	attackspam	\[2019-11-14 11:49:22\] NOTICE\[2601\] chan_sip.c: Registration from '"7001" \' failed for '45.143.221.15:5263' - Wrong password \[2019-11-14 11:49:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-14T11:49:22.700-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7001",SessionID="0x7fdf2c2ef6a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.15/5263",Challenge="45a8ccbe",ReceivedChallenge="45a8ccbe",ReceivedHash="250b502a83630247a69ff74fa8059d1c" \[2019-11-14 11:49:22\] NOTICE\[2601\] chan_sip.c: Registration from '"7001" \' failed for '45.143.221.15:5263' - Wrong password \[2019-11-14 11:49:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-14T11:49:22.833-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7001",SessionID="0x7fdf2c53e5e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-11-15 01:00:42
163.172.22.247	attackbots	3389BruteforceFW22	2019-11-15 00:39:35
85.128.142.162	attackbots	Automatic report - XMLRPC Attack	2019-11-15 00:31:55
62.234.23.78	attack	Nov 14 21:17:43 gw1 sshd[30856]: Failed password for root from 62.234.23.78 port 50734 ssh2 Nov 14 21:22:31 gw1 sshd[31039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.23.78 ...	2019-11-15 00:48:20
104.244.72.98	attackbotsspam	11/14/2019-15:39:01.408005 104.244.72.98 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 1	2019-11-15 00:51:40

Recently Reported IPs

104.21.45.152	104.21.45.221	104.21.45.161	104.21.45.23
104.21.45.28	104.21.45.201	104.21.45.237	104.21.45.45
13.225.71.15	104.21.45.24	104.21.45.53	104.21.45.54
104.21.45.55	104.21.45.250	104.21.45.63	104.21.45.66
104.21.45.72	104.21.45.82	104.21.46.119	104.21.46.122