Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 108.2.239.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57232
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;108.2.239.21.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 05:35:31 CST 2025
;; MSG SIZE  rcvd: 105
Host info
21.239.2.108.in-addr.arpa domain name pointer pool-108-2-239-21.phlapa.east.verizon.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.239.2.108.in-addr.arpa	name = pool-108-2-239-21.phlapa.east.verizon.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
103.39.30.248 attack
Aug 17 22:07:34 mxgate1 postfix/postscreen[26787]: CONNECT from [103.39.30.248]:26798 to [176.31.12.44]:25
Aug 17 22:07:34 mxgate1 postfix/dnsblog[26806]: addr 103.39.30.248 listed by domain zen.spamhaus.org as 127.0.0.11
Aug 17 22:07:34 mxgate1 postfix/dnsblog[26806]: addr 103.39.30.248 listed by domain zen.spamhaus.org as 127.0.0.4
Aug 17 22:07:34 mxgate1 postfix/dnsblog[26806]: addr 103.39.30.248 listed by domain zen.spamhaus.org as 127.0.0.3
Aug 17 22:07:34 mxgate1 postfix/dnsblog[26804]: addr 103.39.30.248 listed by domain cbl.abuseat.org as 127.0.0.2
Aug 17 22:07:34 mxgate1 postfix/dnsblog[26808]: addr 103.39.30.248 listed by domain bl.spamcop.net as 127.0.0.2
Aug 17 22:07:34 mxgate1 postfix/dnsblog[26807]: addr 103.39.30.248 listed by domain b.barracudacentral.org as 127.0.0.2
Aug 17 22:07:40 mxgate1 postfix/postscreen[26787]: DNSBL rank 5 for [103.39.30.248]:26798
Aug x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.39.30.248
2020-08-18 06:36:20
179.49.20.50 attack
Aug 17 08:34:44 uapps sshd[24866]: Invalid user candice from 179.49.20.50 port 50470
Aug 17 08:34:46 uapps sshd[24866]: Failed password for invalid user candice from 179.49.20.50 port 50470 ssh2
Aug 17 08:34:48 uapps sshd[24866]: Received disconnect from 179.49.20.50 port 50470:11: Bye Bye [preauth]
Aug 17 08:34:48 uapps sshd[24866]: Disconnected from invalid user candice 179.49.20.50 port 50470 [preauth]
Aug 17 09:02:53 uapps sshd[25374]: Invalid user ky from 179.49.20.50 port 35296
Aug 17 09:02:55 uapps sshd[25374]: Failed password for invalid user ky from 179.49.20.50 port 35296 ssh2
Aug 17 09:02:55 uapps sshd[25374]: Received disconnect from 179.49.20.50 port 35296:11: Bye Bye [preauth]
Aug 17 09:02:55 uapps sshd[25374]: Disconnected from invalid user ky 179.49.20.50 port 35296 [preauth]
Aug 17 09:08:52 uapps sshd[25393]: Invalid user lsx from 179.49.20.50 port 55890
Aug 17 09:08:54 uapps sshd[25393]: Failed password for invalid user lsx from 179.49.20.50 port 55890........
-------------------------------
2020-08-18 06:06:04
68.183.117.247 attack
Aug 18 00:44:50 journals sshd\[55430\]: Invalid user sinus from 68.183.117.247
Aug 18 00:44:50 journals sshd\[55430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.117.247
Aug 18 00:44:51 journals sshd\[55430\]: Failed password for invalid user sinus from 68.183.117.247 port 41158 ssh2
Aug 18 00:49:47 journals sshd\[55849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.117.247  user=root
Aug 18 00:49:50 journals sshd\[55849\]: Failed password for root from 68.183.117.247 port 52000 ssh2
...
2020-08-18 06:02:11
124.89.2.202 attackspambots
Aug 17 23:08:50 rocket sshd[14893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.89.2.202
Aug 17 23:08:52 rocket sshd[14893]: Failed password for invalid user ybz from 124.89.2.202 port 39854 ssh2
...
2020-08-18 06:13:31
144.91.65.110 attackspam
Auto Fail2Ban report, multiple SSH login attempts.
2020-08-18 06:28:17
85.105.23.159 attackbotsspam
Automatic report - Port Scan Attack
2020-08-18 06:29:07
115.238.36.162 attackbotsspam
Aug 18 00:08:11 PorscheCustomer sshd[22077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.36.162
Aug 18 00:08:13 PorscheCustomer sshd[22077]: Failed password for invalid user soc from 115.238.36.162 port 38058 ssh2
Aug 18 00:11:47 PorscheCustomer sshd[22290]: Failed password for root from 115.238.36.162 port 10497 ssh2
...
2020-08-18 06:20:59
45.183.40.4 attackbotsspam
20/8/17@16:26:15: FAIL: Alarm-Network address from=45.183.40.4
20/8/17@16:26:15: FAIL: Alarm-Network address from=45.183.40.4
...
2020-08-18 06:30:37
212.70.149.68 attackspam
2020-08-18 00:09:41 dovecot_login authenticator failed for \(User\) \[212.70.149.68\]: 535 Incorrect authentication data \(set_id=derik@no-server.de\)
2020-08-18 00:09:41 dovecot_login authenticator failed for \(User\) \[212.70.149.68\]: 535 Incorrect authentication data \(set_id=derik@no-server.de\)
2020-08-18 00:11:26 dovecot_login authenticator failed for \(User\) \[212.70.149.68\]: 535 Incorrect authentication data \(set_id=derin@no-server.de\)
2020-08-18 00:11:27 dovecot_login authenticator failed for \(User\) \[212.70.149.68\]: 535 Incorrect authentication data \(set_id=derin@no-server.de\)
2020-08-18 00:13:13 dovecot_login authenticator failed for \(User\) \[212.70.149.68\]: 535 Incorrect authentication data \(set_id=dermot@no-server.de\)
...
2020-08-18 06:17:12
204.44.93.140 attack
2020-08-17T14:07:53.118193correo.[domain] sshd[19655]: Invalid user marketing from 204.44.93.140 port 46220 2020-08-17T14:07:55.257564correo.[domain] sshd[19655]: Failed password for invalid user marketing from 204.44.93.140 port 46220 ssh2 2020-08-17T14:11:13.203503correo.[domain] sshd[20092]: Invalid user server from 204.44.93.140 port 53654 ...
2020-08-18 06:36:36
119.4.225.31 attackbotsspam
Aug 18 00:58:13 pkdns2 sshd\[51666\]: Invalid user toro from 119.4.225.31Aug 18 00:58:14 pkdns2 sshd\[51666\]: Failed password for invalid user toro from 119.4.225.31 port 42946 ssh2Aug 18 01:01:01 pkdns2 sshd\[51814\]: Invalid user testftp from 119.4.225.31Aug 18 01:01:03 pkdns2 sshd\[51814\]: Failed password for invalid user testftp from 119.4.225.31 port 33011 ssh2Aug 18 01:03:58 pkdns2 sshd\[51994\]: Invalid user admin from 119.4.225.31Aug 18 01:04:00 pkdns2 sshd\[51994\]: Failed password for invalid user admin from 119.4.225.31 port 51305 ssh2
...
2020-08-18 06:05:05
76.30.48.210 attackspambots
2020-08-17T15:13:33.951313srv.ecualinux.com sshd[19093]: Invalid user netscreen from 76.30.48.210 port 48794
2020-08-17T15:13:34.010692srv.ecualinux.com sshd[19093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-76-30-48-210.hsd1.tx.comcast.net
2020-08-17T15:13:33.951313srv.ecualinux.com sshd[19093]: Invalid user netscreen from 76.30.48.210 port 48794
2020-08-17T15:13:36.360447srv.ecualinux.com sshd[19093]: Failed password for invalid user netscreen from 76.30.48.210 port 48794 ssh2
2020-08-17T15:13:36.763336srv.ecualinux.com sshd[19097]: Invalid user nexthink from 76.30.48.210 port 50096
2020-08-17T15:13:36.823860srv.ecualinux.com sshd[19097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-76-30-48-210.hsd1.tx.comcast.net
2020-08-17T15:13:36.763336srv.ecualinux.com sshd[19097]: Invalid user nexthink from 76.30.48.210 port 50096
2020-08-17T15:13:38.448104srv.ecualinux.com sshd[19097]: ........
------------------------------
2020-08-18 06:14:50
104.215.151.21 attackspambots
$f2bV_matches
2020-08-18 06:17:56
183.88.234.22 attackbots
Brute force attempt
2020-08-18 06:11:13
71.246.211.18 attackspam
SSH Invalid Login
2020-08-18 06:13:02

Recently Reported IPs

17.83.23.226 197.12.219.202 155.122.42.179 143.14.156.225
125.60.146.17 47.81.147.63 242.108.22.19 34.132.96.134
251.75.139.51 155.62.113.210 98.149.143.35 101.198.113.220
191.121.23.255 144.48.37.166 7.17.33.209 76.89.232.68
215.5.24.15 107.126.113.52 237.237.204.102 23.112.206.145