Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.21.35.202 spam
AKA healthpreneurgroup.com email spammers
2023-06-28 05:07:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.3.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3492
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.3.8.			IN	A

;; AUTHORITY SECTION:
.			129	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:22:48 CST 2022
;; MSG SIZE  rcvd: 103
Host info
Host 8.3.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.3.21.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
137.74.132.171 attackbots
Sep  9 12:52:46 prod4 sshd\[26689\]: Invalid user jiong from 137.74.132.171
Sep  9 12:52:48 prod4 sshd\[26689\]: Failed password for invalid user jiong from 137.74.132.171 port 55810 ssh2
Sep  9 12:57:54 prod4 sshd\[29069\]: Invalid user pokemon from 137.74.132.171
...
2020-09-09 21:33:48
212.70.149.52 attack
2020-09-04 14:19:05,414 fail2ban.actions        [18715]: NOTICE  [postfix-sasl] Ban 212.70.149.52
2020-09-04 16:21:25,651 fail2ban.actions        [18715]: NOTICE  [postfix-sasl] Ban 212.70.149.52
2020-09-04 18:23:48,731 fail2ban.actions        [18715]: NOTICE  [postfix-sasl] Ban 212.70.149.52
2020-09-04 20:26:07,423 fail2ban.actions        [18715]: NOTICE  [postfix-sasl] Ban 212.70.149.52
2020-09-04 22:28:25,463 fail2ban.actions        [18715]: NOTICE  [postfix-sasl] Ban 212.70.149.52
2020-09-09 21:54:02
117.192.42.33 attack
<6 unauthorized SSH connections
2020-09-09 21:39:46
210.75.240.13 attackbotsspam
Sep  9 16:00:38 sso sshd[16416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.75.240.13
Sep  9 16:00:40 sso sshd[16416]: Failed password for invalid user file31 from 210.75.240.13 port 44828 ssh2
...
2020-09-09 22:07:11
194.180.224.103 attackspam
 TCP (SYN) 194.180.224.103:25280 -> port 22, len 48
2020-09-09 21:41:48
106.55.13.61 attack
Sep  8 09:52:15 dignus sshd[30185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.13.61  user=root
Sep  8 09:52:17 dignus sshd[30185]: Failed password for root from 106.55.13.61 port 52702 ssh2
Sep  8 09:53:25 dignus sshd[30239]: Invalid user Leo from 106.55.13.61 port 34356
Sep  8 09:53:25 dignus sshd[30239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.13.61
Sep  8 09:53:27 dignus sshd[30239]: Failed password for invalid user Leo from 106.55.13.61 port 34356 ssh2
...
2020-09-09 21:51:14
152.231.140.150 attack
152.231.140.150 (CR/Costa Rica/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  9 05:41:47 jbs1 sshd[32152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.252.164.246  user=root
Sep  9 05:37:56 jbs1 sshd[30437]: Failed password for root from 118.89.30.90 port 48122 ssh2
Sep  9 05:37:56 jbs1 sshd[30354]: Failed password for root from 45.154.35.254 port 54932 ssh2
Sep  9 05:41:00 jbs1 sshd[31857]: Failed password for root from 152.231.140.150 port 37732 ssh2
Sep  9 05:40:57 jbs1 sshd[31857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.231.140.150  user=root

IP Addresses Blocked:

106.252.164.246 (KR/South Korea/-)
118.89.30.90 (CN/China/-)
45.154.35.254 (DE/Germany/-)
2020-09-09 21:55:06
58.71.220.66 attack
$f2bV_matches
2020-09-09 22:01:44
195.146.59.157 attack
TCP ports : 3864 / 4053 / 9287 / 9546
2020-09-09 21:31:24
23.248.162.177 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root
2020-09-09 22:06:53
106.13.174.144 attackbotsspam
SSH brute force
2020-09-09 21:20:08
82.165.159.130 attackbotsspam
E-Mail Spam (RBL) [REJECTED]
2020-09-09 22:07:43
202.29.39.1 attackspambots
SSH
2020-09-09 21:32:49
221.217.227.86 attackbotsspam
Sep  8 22:49:09 powerpi2 sshd[14363]: Failed password for root from 221.217.227.86 port 30593 ssh2
Sep  8 22:50:26 powerpi2 sshd[14440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.217.227.86  user=root
Sep  8 22:50:29 powerpi2 sshd[14440]: Failed password for root from 221.217.227.86 port 31361 ssh2
...
2020-09-09 22:02:49
167.99.90.240 attackbots
167.99.90.240 - - [09/Sep/2020:12:40:00 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.90.240 - - [09/Sep/2020:12:40:02 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.90.240 - - [09/Sep/2020:12:40:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-09 22:10:38

Recently Reported IPs

104.21.69.111 104.21.3.67 104.21.3.83 104.21.3.92
104.21.3.78 104.21.3.85 104.21.3.94 104.21.3.95
104.21.3.98 104.21.3.68 104.21.69.113 104.21.30.10
104.21.30.108 104.21.30.110 104.21.30.119 104.21.30.113
104.21.30.11 104.21.30.123 104.21.30.121 104.21.30.127