Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.42.213.169 attack
Sep 24 22:06:56 abendstille sshd\[12749\]: Invalid user 107 from 104.42.213.169
Sep 24 22:06:56 abendstille sshd\[12749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.213.169
Sep 24 22:06:56 abendstille sshd\[12752\]: Invalid user 107 from 104.42.213.169
Sep 24 22:06:56 abendstille sshd\[12752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.213.169
Sep 24 22:06:58 abendstille sshd\[12749\]: Failed password for invalid user 107 from 104.42.213.169 port 46905 ssh2
...
2020-09-25 04:09:29
104.42.234.123 attackspambots
May  9 04:55:22 vpn01 sshd[30682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.234.123
May  9 04:55:24 vpn01 sshd[30682]: Failed password for invalid user user from 104.42.234.123 port 60448 ssh2
...
2020-05-09 13:16:45
104.42.234.123 attackspam
Unauthorized connection attempt detected from IP address 104.42.234.123 to port 7002 [J]
2020-02-23 16:40:12
104.42.234.123 attackspambots
trying to access non-authorized port
2020-02-07 23:03:51
104.42.253.164 attackspam
Feb  1 22:59:59 dedicated sshd[23566]: Invalid user user8 from 104.42.253.164 port 39898
2020-02-02 06:04:15
104.42.253.164 attack
Invalid user ujala from 104.42.253.164 port 53798
2020-02-01 01:03:35
104.42.234.123 attack
Unauthorized connection attempt detected from IP address 104.42.234.123 to port 1433 [J]
2020-01-29 03:43:00
104.42.234.123 attackspam
Unauthorized connection attempt detected from IP address 104.42.234.123 to port 7001 [J]
2020-01-06 01:58:43
104.42.29.236 attackbots
Nov 26 07:30:08 * sshd[18067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.29.236
Nov 26 07:30:10 * sshd[18067]: Failed password for invalid user cetp from 104.42.29.236 port 17344 ssh2
2019-11-26 14:59:23
104.42.25.12 attack
Nov 20 05:26:04 wbs sshd\[14097\]: Invalid user linda from 104.42.25.12
Nov 20 05:26:04 wbs sshd\[14097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.25.12
Nov 20 05:26:06 wbs sshd\[14097\]: Failed password for invalid user linda from 104.42.25.12 port 2048 ssh2
Nov 20 05:30:13 wbs sshd\[14459\]: Invalid user dovecot from 104.42.25.12
Nov 20 05:30:13 wbs sshd\[14459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.25.12
2019-11-21 05:26:44
104.42.25.12 attack
Nov 17 02:11:29 ns381471 sshd[4748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.25.12
Nov 17 02:11:31 ns381471 sshd[4748]: Failed password for invalid user ezis from 104.42.25.12 port 2048 ssh2
2019-11-17 09:41:10
104.42.25.12 attackbotsspam
Nov  3 05:36:17 rotator sshd\[3605\]: Invalid user unborn from 104.42.25.12Nov  3 05:36:19 rotator sshd\[3605\]: Failed password for invalid user unborn from 104.42.25.12 port 25536 ssh2Nov  3 05:41:08 rotator sshd\[4400\]: Invalid user dsddl1ddd23321 from 104.42.25.12Nov  3 05:41:10 rotator sshd\[4400\]: Failed password for invalid user dsddl1ddd23321 from 104.42.25.12 port 25536 ssh2Nov  3 05:46:01 rotator sshd\[5257\]: Invalid user 123456 from 104.42.25.12Nov  3 05:46:03 rotator sshd\[5257\]: Failed password for invalid user 123456 from 104.42.25.12 port 25536 ssh2
...
2019-11-03 12:47:15
104.42.27.187 attack
Nov  2 05:44:10 unicornsoft sshd\[30631\]: User root from 104.42.27.187 not allowed because not listed in AllowUsers
Nov  2 05:44:10 unicornsoft sshd\[30631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.27.187  user=root
Nov  2 05:44:12 unicornsoft sshd\[30631\]: Failed password for invalid user root from 104.42.27.187 port 26560 ssh2
2019-11-02 16:43:12
104.42.27.187 attack
2019-10-30 13:06:20,337 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 13:27:54,342 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 13:45:44,284 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 14:03:37,791 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 14:21:16,437 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 13:06:20,337 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 13:27:54,342 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 13:45:44,284 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 14:03:37,791 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 14:21:16,437 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 13:06:20,337 fail2ban.actions        \[1897\]: NOTICE  \[ssh\] Ban 104.42.27.187
2019-10-30 1
2019-11-01 04:13:14
104.42.27.187 attackspam
firewall-block, port(s): 23/tcp
2019-10-29 21:25:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.2.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63919
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.42.2.91.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 16:13:50 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 91.2.42.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 91.2.42.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
116.55.245.26 attackbots
Jul 30 21:14:44 serwer sshd\[3043\]: Invalid user zhoujun from 116.55.245.26 port 53244
Jul 30 21:14:44 serwer sshd\[3043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.55.245.26
Jul 30 21:14:46 serwer sshd\[3043\]: Failed password for invalid user zhoujun from 116.55.245.26 port 53244 ssh2
...
2020-07-31 03:15:38
177.73.105.252 attackbots
Automatic report - Port Scan Attack
2020-07-31 03:31:34
151.236.89.21 attack
ICMP MH Probe, Scan /Distributed -
2020-07-31 03:27:55
118.25.111.153 attackspambots
Automatic report BANNED IP
2020-07-31 03:32:04
118.34.12.35 attackbotsspam
Jul 30 20:18:22 rocket sshd[30146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35
Jul 30 20:18:25 rocket sshd[30146]: Failed password for invalid user mori from 118.34.12.35 port 56110 ssh2
...
2020-07-31 03:33:32
188.217.181.18 attackbots
Jul 30 12:03:18 *** sshd[16046]: Invalid user wangkang from 188.217.181.18
2020-07-31 03:50:22
198.27.66.37 attackbots
Jul 30 19:43:04 pve1 sshd[1292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.66.37 
Jul 30 19:43:06 pve1 sshd[1292]: Failed password for invalid user haoxin from 198.27.66.37 port 37542 ssh2
...
2020-07-31 03:40:45
106.75.181.119 attack
Jul 30 21:17:17 * sshd[1211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.181.119
Jul 30 21:17:19 * sshd[1211]: Failed password for invalid user ykim from 106.75.181.119 port 49622 ssh2
2020-07-31 03:26:33
202.158.62.240 attackbotsspam
 TCP (SYN) 202.158.62.240:43033 -> port 18768, len 44
2020-07-31 03:42:07
187.109.46.26 attack
(smtpauth) Failed SMTP AUTH login from 187.109.46.26 (BR/Brazil/46.109.187.in-addr.arpa): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-30 16:33:44 plain authenticator failed for ([187.109.46.26]) [187.109.46.26]: 535 Incorrect authentication data (set_id=ab-heidary@safanicu.com)
2020-07-31 03:14:19
151.236.89.19 attackbotsspam
ICMP MH Probe, Scan /Distributed -
2020-07-31 03:37:26
192.99.4.145 attack
Jul 30 21:32:08 buvik sshd[7800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.4.145
Jul 30 21:32:10 buvik sshd[7800]: Failed password for invalid user nxroot from 192.99.4.145 port 33022 ssh2
Jul 30 21:38:06 buvik sshd[8649]: Invalid user zhongyan from 192.99.4.145
...
2020-07-31 03:42:34
51.254.32.102 attack
Jul 30 21:23:35 pornomens sshd\[17712\]: Invalid user sagdiev from 51.254.32.102 port 46942
Jul 30 21:23:35 pornomens sshd\[17712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.32.102
Jul 30 21:23:37 pornomens sshd\[17712\]: Failed password for invalid user sagdiev from 51.254.32.102 port 46942 ssh2
...
2020-07-31 03:29:51
178.46.212.65 attack
Jul 30 14:02:47 [host] kernel: [1777769.041331] [U
Jul 30 14:02:47 [host] kernel: [1777769.065837] [U
Jul 30 14:02:47 [host] kernel: [1777769.090808] [U
Jul 30 14:03:24 [host] kernel: [1777806.039670] [U
Jul 30 14:03:24 [host] kernel: [1777806.041533] [U
Jul 30 14:03:24 [host] kernel: [1777806.057178] [U
2020-07-31 03:44:38
186.176.252.54 attackspambots
186.176.252.54 - - [30/Jul/2020:14:29:43 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
186.176.252.54 - - [30/Jul/2020:14:29:44 +0100] "POST /wp-login.php HTTP/1.1" 200 5871 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
186.176.252.54 - - [30/Jul/2020:14:30:44 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
2020-07-31 03:21:55

Recently Reported IPs

104.42.181.29 104.42.183.64 104.42.210.191 104.42.182.207
104.42.216.178 104.42.208.253 104.42.223.141 104.42.27.181
104.42.36.52 104.42.198.199 104.42.50.35 104.42.79.71
104.42.61.114 104.43.13.216 104.43.17.202 104.43.141.164
104.43.170.45 104.43.201.97 104.43.209.47 104.43.215.215