104.236.55.242

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.236.55.217	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-05 07:15:56
104.236.55.217	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 96 - port: 13094 proto: tcp cat: Misc Attackbytes: 60	2020-10-04 23:28:36
104.236.55.217	attackspambots	TCP (SYN) 104.236.55.217:46138 -> port 13094, len 44	2020-10-04 15:12:06
104.236.55.217	attack	firewall-block, port(s): 26310/tcp	2020-10-01 07:07:18
104.236.55.217	attack	TCP (SYN) 104.236.55.217:56414 -> port 24410, len 44	2020-09-30 23:33:00
104.236.55.217	attackbotsspam	SIP/5060 Probe, BF, Hack -	2020-09-30 16:02:10
104.236.55.217	attackbotsspam	SIP/5060 Probe, BF, Hack -	2020-07-04 16:34:36
104.236.55.217	attack	Jul 4 01:17:22 debian-2gb-nbg1-2 kernel: \[16076863.379293\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.236.55.217 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4316 PROTO=TCP SPT=52404 DPT=28588 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-04 08:18:00
104.236.55.217	attack	Fail2Ban Ban Triggered	2020-06-20 04:39:47
104.236.55.217	attackspam	Jun 14 15:04:11 debian-2gb-nbg1-2 kernel: \[14398563.603736\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.236.55.217 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33337 PROTO=TCP SPT=59900 DPT=13440 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-14 21:51:18
104.236.55.217	attackspambots	32205/tcp 1903/tcp 10619/tcp... [2020-04-13/05-08]95pkt,32pt.(tcp)	2020-05-09 20:34:02
104.236.55.217	attackspambots	Lines containing failures of 104.236.55.217 Oct 5 19:30:37 kopano sshd[3110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.55.217 user=r.r Oct 5 19:30:39 kopano sshd[3110]: Failed password for r.r from 104.236.55.217 port 42758 ssh2 Oct 5 19:30:39 kopano sshd[3110]: Received disconnect from 104.236.55.217 port 42758:11: Bye Bye [preauth] Oct 5 19:30:39 kopano sshd[3110]: Disconnected from authenticating user r.r 104.236.55.217 port 42758 [preauth] Oct 5 19:37:07 kopano sshd[3287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.55.217 user=r.r Oct 5 19:37:09 kopano sshd[3287]: Failed password for r.r from 104.236.55.217 port 50624 ssh2 Oct 5 19:37:09 kopano sshd[3287]: Received disconnect from 104.236.55.217 port 50624:11: Bye Bye [preauth] Oct 5 19:37:09 kopano sshd[3287]: Disconnected from authenticating user r.r 104.236.55.217 port 50624 [preauth] Oct 5 19:40:........ ------------------------------	2019-10-07 20:13:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.236.55.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24761
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.236.55.242.			IN	A

;; AUTHORITY SECTION:
.			509	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:05:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 242.55.236.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.55.236.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.68.248.80	attackbotsspam	Invalid user ftpuser from 138.68.248.80 port 60418	2020-09-19 21:41:57
113.88.164.199	attackspambots	Unauthorized connection attempt from IP address 113.88.164.199 on Port 445(SMB)	2020-09-19 21:22:51
210.2.134.34	attackbots	Unauthorized connection attempt from IP address 210.2.134.34 on Port 445(SMB)	2020-09-19 21:41:02
221.125.165.25	attack	Sep 19 09:08:37 ssh2 sshd[24977]: Invalid user admin from 221.125.165.25 port 43233 Sep 19 09:08:37 ssh2 sshd[24977]: Failed password for invalid user admin from 221.125.165.25 port 43233 ssh2 Sep 19 09:08:37 ssh2 sshd[24977]: Connection closed by invalid user admin 221.125.165.25 port 43233 [preauth] ...	2020-09-19 21:35:43
193.42.240.214	attackspam	Sep 19 00:08:53 scw-focused-cartwright sshd[5433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.240.214 Sep 19 00:08:55 scw-focused-cartwright sshd[5433]: Failed password for invalid user netman from 193.42.240.214 port 60494 ssh2	2020-09-19 21:42:23
178.128.92.109	attackspam	20 attempts against mh-ssh on echoip	2020-09-19 21:45:02
201.59.118.2	attackspam	Unauthorized connection attempt from IP address 201.59.118.2 on Port 445(SMB)	2020-09-19 21:36:37
72.19.15.32	attack	Spam	2020-09-19 21:38:34
34.83.216.151	attack	CMS (WordPress or Joomla) login attempt.	2020-09-19 21:07:32
46.241.165.94	attackbotsspam	Unauthorized connection attempt from IP address 46.241.165.94 on Port 445(SMB)	2020-09-19 21:14:09
201.123.173.205	attackspambots	Brute-force attempt banned	2020-09-19 21:10:18
68.183.31.114	attackbots	(sshd) Failed SSH login from 68.183.31.114 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 19 08:11:55 server2 sshd[25334]: Invalid user prueba from 68.183.31.114 Sep 19 08:11:55 server2 sshd[25334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.31.114 Sep 19 08:11:57 server2 sshd[25334]: Failed password for invalid user prueba from 68.183.31.114 port 59398 ssh2 Sep 19 08:24:37 server2 sshd[4754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.31.114 user=root Sep 19 08:24:39 server2 sshd[4754]: Failed password for root from 68.183.31.114 port 59994 ssh2	2020-09-19 21:32:12
83.239.38.2	attackbots	2020-09-19T12:25:24.444799abusebot-7.cloudsearch.cf sshd[2405]: Invalid user insserver from 83.239.38.2 port 45624 2020-09-19T12:25:24.449264abusebot-7.cloudsearch.cf sshd[2405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.239.38.2 2020-09-19T12:25:24.444799abusebot-7.cloudsearch.cf sshd[2405]: Invalid user insserver from 83.239.38.2 port 45624 2020-09-19T12:25:25.966025abusebot-7.cloudsearch.cf sshd[2405]: Failed password for invalid user insserver from 83.239.38.2 port 45624 ssh2 2020-09-19T12:28:40.682636abusebot-7.cloudsearch.cf sshd[2408]: Invalid user mysql from 83.239.38.2 port 42786 2020-09-19T12:28:40.688998abusebot-7.cloudsearch.cf sshd[2408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.239.38.2 2020-09-19T12:28:40.682636abusebot-7.cloudsearch.cf sshd[2408]: Invalid user mysql from 83.239.38.2 port 42786 2020-09-19T12:28:42.782508abusebot-7.cloudsearch.cf sshd[2408]: Failed password ...	2020-09-19 21:45:58
27.154.67.176	attackspam	2020-09-19T08:09:43.8859711495-001 sshd[10606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.67.176 2020-09-19T08:09:43.8821051495-001 sshd[10606]: Invalid user test from 27.154.67.176 port 36448 2020-09-19T08:09:45.5535191495-001 sshd[10606]: Failed password for invalid user test from 27.154.67.176 port 36448 ssh2 2020-09-19T08:15:03.8118851495-001 sshd[10778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.67.176 user=root 2020-09-19T08:15:06.4123361495-001 sshd[10778]: Failed password for root from 27.154.67.176 port 43450 ssh2 2020-09-19T08:20:20.9491531495-001 sshd[11070]: Invalid user www from 27.154.67.176 port 50436 ...	2020-09-19 21:23:13
61.144.103.146	attackbots	TCP (SYN) 61.144.103.146:40219 -> port 22, len 44	2020-09-19 21:28:26

Recently Reported IPs

104.236.51.118	104.236.61.242	105.213.75.109	104.237.199.167
104.237.199.160	104.237.199.187	104.237.199.178	104.237.199.184
104.237.199.182	104.237.199.162	104.237.199.158	104.237.199.168
104.237.199.172	104.237.199.157	104.237.199.164	105.213.75.111
104.237.199.188	104.237.209.128	104.237.203.204	104.237.203.244