Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.211.243.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49328
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.211.243.136.		IN	A

;; AUTHORITY SECTION:
.			394	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 13:57:43 CST 2022
;; MSG SIZE  rcvd: 108
Host info
Host 136.243.211.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 136.243.211.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.12.185.58 attackbotsspam
FTP Brute-Force reported by Fail2Ban
2019-11-09 18:01:35
142.93.212.168 attackspambots
Nov  9 07:38:18 srv01 sshd[10793]: Invalid user url from 142.93.212.168
Nov  9 07:38:18 srv01 sshd[10793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168
Nov  9 07:38:18 srv01 sshd[10793]: Invalid user url from 142.93.212.168
Nov  9 07:38:20 srv01 sshd[10793]: Failed password for invalid user url from 142.93.212.168 port 48458 ssh2
Nov  9 07:42:40 srv01 sshd[10988]: Invalid user svk from 142.93.212.168
...
2019-11-09 17:39:52
45.93.247.55 attack
Nov  9 16:03:54 our-server-hostname postfix/smtpd[25831]: connect from unknown[45.93.247.55]
Nov x@x
Nov x@x
Nov  9 16:03:56 our-server-hostname postfix/smtpd[25831]: 5E973A40115: client=unknown[45.93.247.55]
Nov  9 16:03:57 our-server-hostname postfix/smtpd[24388]: connect from unknown[45.93.247.55]
Nov  9 16:03:57 our-server-hostname postfix/smtpd[22323]: AFBB7A40212: client=unknown[127.0.0.1], orig_client=unknown[45.93.247.55]
Nov  9 16:03:57 our-server-hostname amavis[18332]: (18332-08) Passed CLEAN, [45.93.247.55] [45.93.247.55] , mail_id: ZlzNEw79wpGK, Hhostnames: -, size: 50557, queued_as: AFBB7A40212, 190 ms
Nov  9 16:03:58 our-server-hostname postfix/smtpd[28076]: connect from unknown[45.93.247.55]
Nov x@x
Nov x@x
Nov  9 16:03:58 our-server-hostname postfix/smtpd[25831]: 96118A40115: client=unknown[45.93.247.55]
Nov  9 16:03:58 our-server-hostname postfix/smtpd[24847]: connect from unknown[45.93.247.55]
Nov x@x
Nov x@x
Nov  9 16:03:58 our-server-hostname p........
-------------------------------
2019-11-09 17:56:30
114.99.2.64 attackspam
Nov  9 01:05:55 eola postfix/smtpd[31565]: connect from unknown[114.99.2.64]
Nov  9 01:05:56 eola postfix/smtpd[31565]: lost connection after AUTH from unknown[114.99.2.64]
Nov  9 01:05:56 eola postfix/smtpd[31565]: disconnect from unknown[114.99.2.64] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:57 eola postfix/smtpd[31565]: connect from unknown[114.99.2.64]
Nov  9 01:05:57 eola postfix/smtpd[31565]: lost connection after AUTH from unknown[114.99.2.64]
Nov  9 01:05:57 eola postfix/smtpd[31565]: disconnect from unknown[114.99.2.64] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:57 eola postfix/smtpd[31565]: connect from unknown[114.99.2.64]
Nov  9 01:05:58 eola postfix/smtpd[31565]: lost connection after AUTH from unknown[114.99.2.64]
Nov  9 01:05:58 eola postfix/smtpd[31565]: disconnect from unknown[114.99.2.64] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:58 eola postfix/smtpd[31570]: connect from unknown[114.99.2.64]
Nov  9 01:05:59 eola postfix/smtpd[31570]: lost connection af........
-------------------------------
2019-11-09 17:53:35
185.175.93.104 attack
ET DROP Dshield Block Listed Source group 1 - port: 3422 proto: TCP cat: Misc Attack
2019-11-09 18:11:56
14.226.235.19 attackspam
Lines containing failures of 14.226.235.19
Nov  9 07:10:43 majoron sshd[18258]: Invalid user admin from 14.226.235.19 port 40527
Nov  9 07:10:43 majoron sshd[18258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.226.235.19 
Nov  9 07:10:45 majoron sshd[18258]: Failed password for invalid user admin from 14.226.235.19 port 40527 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.226.235.19
2019-11-09 18:12:59
185.176.27.2 attackspam
11/09/2019-10:50:00.336977 185.176.27.2 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-09 18:04:15
160.153.154.18 attackbots
Automatic report - XMLRPC Attack
2019-11-09 18:07:35
114.99.0.221 attackspambots
Nov  9 01:05:41 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221]
Nov  9 01:05:41 eola postfix/smtpd[31453]: NOQUEUE: reject: RCPT from unknown[114.99.0.221]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<36hp89k>
Nov  9 01:05:41 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Nov  9 01:05:42 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221]
Nov  9 01:05:43 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221]
Nov  9 01:05:43 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:43 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221]
Nov  9 01:05:44 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221]
Nov  9 01:05:44 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2
Nov  9 01:05:44 eola........
-------------------------------
2019-11-09 17:59:40
210.212.145.125 attack
Nov  9 09:52:49 web8 sshd\[8168\]: Invalid user nagios from 210.212.145.125
Nov  9 09:52:49 web8 sshd\[8168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.212.145.125
Nov  9 09:52:50 web8 sshd\[8168\]: Failed password for invalid user nagios from 210.212.145.125 port 40357 ssh2
Nov  9 09:57:05 web8 sshd\[10220\]: Invalid user richard from 210.212.145.125
Nov  9 09:57:05 web8 sshd\[10220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.212.145.125
2019-11-09 18:10:41
45.136.109.215 attackbotsspam
Nov  9 10:38:35 mc1 kernel: \[4578605.080818\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=63386 PROTO=TCP SPT=45249 DPT=16333 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  9 10:40:04 mc1 kernel: \[4578693.542923\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46424 PROTO=TCP SPT=45249 DPT=16300 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  9 10:42:30 mc1 kernel: \[4578839.905270\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=62542 PROTO=TCP SPT=45249 DPT=17999 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-09 17:52:41
36.233.206.220 attack
Port 1433 Scan
2019-11-09 18:08:25
134.175.39.246 attack
Nov  8 23:31:56 php1 sshd\[22613\]: Invalid user ABC12345 from 134.175.39.246
Nov  8 23:31:56 php1 sshd\[22613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.39.246
Nov  8 23:31:58 php1 sshd\[22613\]: Failed password for invalid user ABC12345 from 134.175.39.246 port 44514 ssh2
Nov  8 23:36:58 php1 sshd\[23142\]: Invalid user server!2008 from 134.175.39.246
Nov  8 23:36:58 php1 sshd\[23142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.39.246
2019-11-09 18:05:34
61.12.38.162 attackspam
Nov  8 21:41:47 eddieflores sshd\[388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.38.162  user=root
Nov  8 21:41:48 eddieflores sshd\[388\]: Failed password for root from 61.12.38.162 port 51258 ssh2
Nov  8 21:47:11 eddieflores sshd\[851\]: Invalid user day from 61.12.38.162
Nov  8 21:47:11 eddieflores sshd\[851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.38.162
Nov  8 21:47:13 eddieflores sshd\[851\]: Failed password for invalid user day from 61.12.38.162 port 59518 ssh2
2019-11-09 18:00:10
89.3.133.153 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/89.3.133.153/ 
 
 FR - 1H : (41)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : FR 
 NAME ASN : ASN21502 
 
 IP : 89.3.133.153 
 
 CIDR : 89.3.128.0/18 
 
 PREFIX COUNT : 45 
 
 UNIQUE IP COUNT : 1395712 
 
 
 ATTACKS DETECTED ASN21502 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-09 07:25:40 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-11-09 17:36:10

Recently Reported IPs

104.211.25.192 104.211.230.17 104.211.46.64 104.211.26.141
104.211.23.177 104.211.47.111 104.211.47.145 104.211.29.88
105.213.101.30 104.211.5.214 104.211.41.215 104.211.5.128
104.211.5.87 104.211.50.18 104.211.60.104 104.211.7.200
104.211.63.229 104.211.59.224 104.211.77.233 104.211.73.126