Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.21.64.248 spam
Spammer Website using 104.21.64.248
2022-09-19 03:38:20
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.6.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36774
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.6.242.			IN	A

;; AUTHORITY SECTION:
.			520	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:00:21 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 242.6.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.6.21.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
110.18.43.86 attack
Unauthorised access (Oct 15) SRC=110.18.43.86 LEN=40 TTL=50 ID=65029 TCP DPT=8080 WINDOW=55122 SYN 
Unauthorised access (Oct 15) SRC=110.18.43.86 LEN=40 TTL=50 ID=7074 TCP DPT=8080 WINDOW=29197 SYN 
Unauthorised access (Oct 15) SRC=110.18.43.86 LEN=40 TTL=50 ID=24861 TCP DPT=8080 WINDOW=21441 SYN 
Unauthorised access (Oct 14) SRC=110.18.43.86 LEN=40 TTL=50 ID=39974 TCP DPT=8080 WINDOW=55569 SYN 
Unauthorised access (Oct 14) SRC=110.18.43.86 LEN=40 TTL=50 ID=8348 TCP DPT=8080 WINDOW=55569 SYN 
Unauthorised access (Oct 14) SRC=110.18.43.86 LEN=40 TTL=50 ID=6399 TCP DPT=8080 WINDOW=14910 SYN
2019-10-16 10:35:13
117.50.95.121 attackbotsspam
Oct 15 18:21:48 home sshd[20701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.95.121  user=root
Oct 15 18:21:50 home sshd[20701]: Failed password for root from 117.50.95.121 port 42298 ssh2
Oct 15 18:41:27 home sshd[20894]: Invalid user db1inst1 from 117.50.95.121 port 41098
Oct 15 18:41:27 home sshd[20894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.95.121
Oct 15 18:41:27 home sshd[20894]: Invalid user db1inst1 from 117.50.95.121 port 41098
Oct 15 18:41:29 home sshd[20894]: Failed password for invalid user db1inst1 from 117.50.95.121 port 41098 ssh2
Oct 15 18:45:59 home sshd[21018]: Invalid user steam from 117.50.95.121 port 50378
Oct 15 18:45:59 home sshd[21018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.95.121
Oct 15 18:45:59 home sshd[21018]: Invalid user steam from 117.50.95.121 port 50378
Oct 15 18:46:01 home sshd[21018]: Failed password for invalid
2019-10-16 10:43:32
35.240.217.103 attack
Invalid user julian from 35.240.217.103 port 54742
2019-10-16 10:14:43
122.224.129.234 attackspam
port scan and connect, tcp 22 (ssh)
2019-10-16 10:46:18
81.213.166.175 attackspambots
Automatic report - Port Scan Attack
2019-10-16 10:33:52
192.241.183.220 attackbotsspam
SSH-BruteForce
2019-10-16 10:18:54
50.207.130.198 attack
2019-10-15 21:03:51 H=50-207-130-198-static.hfc.comcastbusiness.net (50-207-130-238-static.hfc.comcastbusiness.net) [50.207.130.198]:34056 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/50.207.130.198)
2019-10-15 21:03:52 H=50-207-130-198-static.hfc.comcastbusiness.net (50-207-130-238-static.hfc.comcastbusiness.net) [50.207.130.198]:34056 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/50.207.130.198)
2019-10-15 21:03:52 H=50-207-130-198-static.hfc.comcastbusiness.net (50-207-130-238-static.hfc.comcastbusiness.net) [50.207.130.198]:34056 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6x
...
2019-10-16 10:27:57
134.175.62.14 attackbots
$f2bV_matches
2019-10-16 10:20:33
129.204.123.216 attackspambots
Oct 15 21:43:39 DAAP sshd[27300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.123.216  user=root
Oct 15 21:43:41 DAAP sshd[27300]: Failed password for root from 129.204.123.216 port 51186 ssh2
Oct 15 21:48:25 DAAP sshd[27329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.123.216  user=root
Oct 15 21:48:27 DAAP sshd[27329]: Failed password for root from 129.204.123.216 port 34098 ssh2
...
2019-10-16 10:19:20
58.171.150.7 attackbotsspam
Oct 15 16:47:27 ws22vmsma01 sshd[229652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.171.150.7
Oct 15 16:47:29 ws22vmsma01 sshd[229652]: Failed password for invalid user admin from 58.171.150.7 port 50229 ssh2
...
2019-10-16 10:51:57
106.12.93.25 attack
2019-10-16T04:38:49.908070  sshd[22744]: Invalid user hzdns from 106.12.93.25 port 48672
2019-10-16T04:38:49.922186  sshd[22744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.25
2019-10-16T04:38:49.908070  sshd[22744]: Invalid user hzdns from 106.12.93.25 port 48672
2019-10-16T04:38:52.162476  sshd[22744]: Failed password for invalid user hzdns from 106.12.93.25 port 48672 ssh2
2019-10-16T04:43:05.116455  sshd[22789]: Invalid user test02 from 106.12.93.25 port 40496
...
2019-10-16 10:44:31
180.76.57.7 attackbots
Oct 16 01:40:19 legacy sshd[31768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.57.7
Oct 16 01:40:20 legacy sshd[31768]: Failed password for invalid user 321 from 180.76.57.7 port 54676 ssh2
Oct 16 01:44:29 legacy sshd[31864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.57.7
...
2019-10-16 10:20:56
91.214.179.10 attack
postfix
2019-10-16 10:29:30
101.230.236.177 attack
$f2bV_matches
2019-10-16 10:18:37
178.32.87.231 attackbots
WordPress XMLRPC scan :: 178.32.87.231 0.156 BYPASS [16/Oct/2019:06:47:54  1100] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/6.2.21"
2019-10-16 10:38:04

Recently Reported IPs

1.0.161.181 1.0.227.189 1.0.247.96 1.1.209.239
1.1.227.0 1.1.241.191 1.10.133.150 1.1.240.96
1.1.191.58 1.10.207.187 104.21.6.244 1.1.242.81
1.10.203.118 1.1.251.154 1.1.87.7 1.10.214.190
1.10.214.241 1.10.223.236 1.10.251.23 1.10.238.73