Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.21.23.233 spam
https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146
2022-12-29 00:19:00
104.21.23.233 spam
https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146
2022-12-29 00:13:51
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.2.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1781
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.2.152.			IN	A

;; AUTHORITY SECTION:
.			147	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 08:32:34 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 152.2.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 152.2.21.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
146.88.240.4 attackbots
Warning	Detect UDP port scan attack, scan packet from 146.88.240.4.
2020-06-25 17:41:12
39.97.96.91 attackbotsspam
Unauthorized connection attempt detected from IP address 39.97.96.91 to port 14430
2020-06-25 17:50:45
140.143.0.121 attackspambots
Invalid user thomas from 140.143.0.121 port 33484
2020-06-25 17:38:11
139.155.17.13 attack
(sshd) Failed SSH login from 139.155.17.13 (CN/China/-): 10 in the last 3600 secs
2020-06-25 17:35:09
118.130.153.101 attackbots
Jun 25 05:50:16 ns392434 sshd[27076]: Invalid user iris from 118.130.153.101 port 35064
Jun 25 05:50:16 ns392434 sshd[27076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.130.153.101
Jun 25 05:50:16 ns392434 sshd[27076]: Invalid user iris from 118.130.153.101 port 35064
Jun 25 05:50:18 ns392434 sshd[27076]: Failed password for invalid user iris from 118.130.153.101 port 35064 ssh2
Jun 25 08:52:16 ns392434 sshd[32477]: Invalid user pi from 118.130.153.101 port 51508
Jun 25 08:52:16 ns392434 sshd[32477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.130.153.101
Jun 25 08:52:16 ns392434 sshd[32477]: Invalid user pi from 118.130.153.101 port 51508
Jun 25 08:52:19 ns392434 sshd[32477]: Failed password for invalid user pi from 118.130.153.101 port 51508 ssh2
Jun 25 09:09:44 ns392434 sshd[342]: Invalid user tanya from 118.130.153.101 port 45196
2020-06-25 17:25:36
139.155.81.79 attackbotsspam
20 attempts against mh-ssh on ice
2020-06-25 17:33:51
189.202.204.230 attackbots
2020-06-25T09:59:30.708640amanda2.illicoweb.com sshd\[26217\]: Failed password for root from 189.202.204.230 port 54244 ssh2
2020-06-25T10:03:29.152396amanda2.illicoweb.com sshd\[26384\]: Invalid user test from 189.202.204.230 port 53600
2020-06-25T10:03:29.156957amanda2.illicoweb.com sshd\[26384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.202.204.230
2020-06-25T10:03:31.771796amanda2.illicoweb.com sshd\[26384\]: Failed password for invalid user test from 189.202.204.230 port 53600 ssh2
2020-06-25T10:07:10.909143amanda2.illicoweb.com sshd\[26785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.202.204.230  user=root
...
2020-06-25 17:43:20
45.14.150.51 attack
2020-06-24T17:25:39.274723203.190.112.150 sshd[52479]: Failed password for root from 45.14.150.51 port 55302 ssh2
...
2020-06-25 17:20:22
58.49.76.100 attackbots
Jun 25 00:56:34 propaganda sshd[23791]: Connection from 58.49.76.100 port 27464 on 10.0.0.160 port 22 rdomain ""
Jun 25 00:56:34 propaganda sshd[23791]: Connection closed by 58.49.76.100 port 27464 [preauth]
2020-06-25 17:15:22
46.105.73.155 attackspam
invalid user
2020-06-25 17:48:37
220.165.9.187 attack
WEB server attack.
2020-06-25 17:51:06
68.183.80.250 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 60 - port: 1068 proto: TCP cat: Misc Attack
2020-06-25 17:48:23
185.47.65.30 attackbotsspam
Banned for a week because repeated abuses, for example SSH, but not only
2020-06-25 17:45:32
139.5.241.20 attack
 TCP (SYN) 139.5.241.20:43074 -> port 13554, len 44
2020-06-25 17:41:47
45.141.84.44 attackbotsspam
Jun 25 11:11:24 debian-2gb-nbg1-2 kernel: \[15334946.825603\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.44 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=21234 PROTO=TCP SPT=42576 DPT=9013 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-25 17:24:21

Recently Reported IPs

104.21.2.13 104.21.2.161 104.21.2.166 104.21.2.127
125.89.168.1 104.21.2.182 104.21.2.183 104.21.2.168
104.21.2.191 104.21.2.209 104.21.2.214 104.21.2.208
104.21.2.218 104.21.2.219 104.21.2.229 104.21.2.221
125.90.93.20 149.33.37.202 104.21.2.232 104.21.2.45