104.21.6.172 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.21.64.248	spam	Spammer Website using 104.21.64.248	2022-09-19 03:38:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.6.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33655
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.6.172.			IN	A

;; AUTHORITY SECTION:
.			547	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 00:58:17 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 172.6.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 172.6.21.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
146.71.79.20	attackbots	Repeated brute force against a port	2019-11-14 20:14:09
206.189.231.196	attack	206.189.231.196 - - \[14/Nov/2019:12:14:00 +0100\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - \[14/Nov/2019:12:14:01 +0100\] "POST /wp-login.php HTTP/1.0" 200 4134 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - \[14/Nov/2019:12:14:02 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-14 20:04:24
5.58.56.27	attackbots	www.goldgier.de 5.58.56.27 \[14/Nov/2019:08:59:02 +0100\] "POST /wp-login.php HTTP/1.1" 200 8725 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.goldgier.de 5.58.56.27 \[14/Nov/2019:08:59:08 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4368 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-14 20:03:53
139.99.121.6	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2019-11-14 20:00:43
117.87.227.179	attack	Nov 14 08:19:04 elektron postfix/smtpd\[1052\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP helo=\ Nov 14 08:19:44 elektron postfix/smtpd\[1052\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP helo=\ Nov 14 08:20:27 elektron postfix/smtpd\[1037\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP helo=\ Nov 14 08:21:15 elektron postfix/smtpd\[27481\]: NOQUEUE: reject: RCPT from unknown\[117.87.227.179\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.87.227.179\]\; from=\ to=\ proto=ESMTP h	2019-11-14 20:09:31
139.215.217.180	attack	SSH Bruteforce	2019-11-14 20:15:39
138.197.89.212	attackbotsspam	Nov 14 12:53:46 ncomp sshd[10382]: Invalid user rtohotan from 138.197.89.212 Nov 14 12:53:46 ncomp sshd[10382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 Nov 14 12:53:46 ncomp sshd[10382]: Invalid user rtohotan from 138.197.89.212 Nov 14 12:53:47 ncomp sshd[10382]: Failed password for invalid user rtohotan from 138.197.89.212 port 59340 ssh2	2019-11-14 20:13:22
185.220.101.58	attackspambots	Automatic report - XMLRPC Attack	2019-11-14 20:20:20
185.53.88.33	attackbotsspam	\[2019-11-14 01:22:22\] NOTICE\[2601\] chan_sip.c: Registration from '"1234" \' failed for '185.53.88.33:5233' - Wrong password \[2019-11-14 01:22:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-14T01:22:22.664-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7fdf2c4d9988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.33/5233",Challenge="368475df",ReceivedChallenge="368475df",ReceivedHash="8a3a276e3fb4cc0370d6183afbb75b04" \[2019-11-14 01:22:22\] NOTICE\[2601\] chan_sip.c: Registration from '"1234" \' failed for '185.53.88.33:5233' - Wrong password \[2019-11-14 01:22:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-14T01:22:22.845-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1234",SessionID="0x7fdf2cc6a468",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1	2019-11-14 20:13:08
171.103.56.74	attackspambots	B: Magento admin pass test (wrong country)	2019-11-14 20:15:12
188.166.159.148	attack	SSH Bruteforce	2019-11-14 20:32:50
211.105.187.10	attackspam	UTC: 2019-11-13 port: 88/tcp	2019-11-14 20:30:18
81.177.33.4	attackspambots	WordPress login Brute force / Web App Attack on client site.	2019-11-14 20:26:33
222.186.180.41	attackspam	Nov 14 12:55:08 legacy sshd[22479]: Failed password for root from 222.186.180.41 port 40634 ssh2 Nov 14 12:55:23 legacy sshd[22479]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 40634 ssh2 [preauth] Nov 14 12:55:30 legacy sshd[22487]: Failed password for root from 222.186.180.41 port 51024 ssh2 ...	2019-11-14 19:59:54
175.19.30.46	attackbots	F2B jail: sshd. Time: 2019-11-14 08:50:57, Reported by: VKReport	2019-11-14 20:06:17

Recently Reported IPs

219.46.22.199	104.21.6.173	110.150.76.166	104.21.6.175
104.21.6.179	104.21.6.18	104.21.6.180	104.21.6.184
104.21.6.185	104.21.6.187	104.21.6.189	214.59.241.242
104.21.6.19	175.35.153.176	104.21.6.192	104.21.6.197
104.21.6.198	104.21.6.199	104.21.6.20	104.21.6.202