Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '109.246.0.0 - 109.246.255.255'

% Abuse contact for '109.246.0.0 - 109.246.255.255' is 'abuse@microsoft.com'

inetnum:        109.246.0.0 - 109.246.255.255
netname:        UK-MICROSOFT-20091119
country:        GB
org:            ORG-MA42-RIPE
admin-c:        DH5439-RIPE
tech-c:         MRPA3-RIPE
status:         ALLOCATED PA
mnt-by:         MICROSOFT-MAINT
mnt-by:         RIPE-NCC-HM-MNT
created:        2023-05-22T13:45:26Z
last-modified:  2023-05-22T13:45:26Z
source:         RIPE

organisation:   ORG-MA42-RIPE
org-name:       Microsoft Limited
country:        GB
org-type:       LIR
descr:          Microsoft Corporation AS8075
descr:          To report suspected security issues specific to
descr:          traffic emanating from Microsoft online services,
descr:          including the distribution of malicious content
descr:          or other illicit or illegal material through a
descr:          Microsoft online service, please submit reports
descr:          to:
descr:          * https://cert.microsoft.com
descr:          For SPAM and other abuse issues, such as Microsoft
descr:          Accounts, please contact:
descr:          * abuse@microsoft.com
descr:          To report security vulnerabilities in Microsoft
descr:          products and services, please contact:
descr:          * secure@microsoft.com
descr:          For legal and law enforcement-related requests,
descr:          please contact:
descr:          * msndcc@microsoft.com
descr:          For routing, peering or DNS issues, please
descr:          contact:
descr:          * IOC@microsoft.com
address:        One Microsoft Way
address:        WA 98052
address:        Redmond
address:        UNITED STATES
phone:          +1 425 882 8080
fax-no:         +1 425 936 7329
abuse-c:        MAC274-RIPE
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        MICROSOFT-MAINT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         MICROSOFT-MAINT
created:        2004-04-17T12:18:10Z
last-modified:  2022-03-08T18:20:31Z
source:         RIPE # Filtered

role:           Microsoft Routing, Peering, and DNS
address:        One Microsoft Way
address:        Redmond, WA 98052
nic-hdl:        MRPA3-RIPE
mnt-by:         MICROSOFT-MAINT
created:        2014-08-26T16:25:24Z
last-modified:  2014-08-26T16:25:24Z
source:         RIPE # Filtered

person:         Divya Quamara
address:        One Microsoft Way
address:        Redmond, WA 98052
phone:          +1-425-882-8080
nic-hdl:        DH5439-RIPE
mnt-by:         MICROSOFT-MAINT
created:        2014-08-26T16:24:14Z
last-modified:  2016-02-19T07:09:41Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.246.137.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8538
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.246.137.246.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026042802 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 29 09:12:57 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 246.137.246.109.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 246.137.246.109.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
123.207.252.233 attack
Feb  4 11:55:44 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=123.207.252.233, lip=212.111.212.230, session=\<8sTgCr2dMOJ7z/zp\>
Feb  4 11:55:53 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=123.207.252.233, lip=212.111.212.230, session=\<3A8xC72dkOV7z/zp\>
Feb  4 11:56:07 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 13 secs\): user=\, method=PLAIN, rip=123.207.252.233, lip=212.111.212.230, session=\
Feb  4 11:57:31 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=123.207.252.233, lip=212.111.212.230, session=\
Feb  4 11:57:39 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=123
...
2020-02-04 21:27:14
125.162.95.236 attack
20/2/4@01:46:08: FAIL: Alarm-Network address from=125.162.95.236
20/2/4@01:46:08: FAIL: Alarm-Network address from=125.162.95.236
...
2020-02-04 21:29:34
106.13.81.18 attackbots
Unauthorized connection attempt detected from IP address 106.13.81.18 to port 2220 [J]
2020-02-04 21:37:06
182.72.154.30 attackbots
Unauthorized connection attempt detected from IP address 182.72.154.30 to port 2220 [J]
2020-02-04 21:06:34
14.232.245.27 attack
Feb  3 23:35:22 serwer sshd\[11808\]: Invalid user test from 14.232.245.27 port 45514
Feb  3 23:35:22 serwer sshd\[11808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.245.27
Feb  3 23:35:23 serwer sshd\[11808\]: Failed password for invalid user test from 14.232.245.27 port 45514 ssh2
Feb  3 23:38:45 serwer sshd\[12096\]: Invalid user oracle from 14.232.245.27 port 59484
Feb  3 23:38:45 serwer sshd\[12096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.245.27
Feb  3 23:38:46 serwer sshd\[12096\]: Failed password for invalid user oracle from 14.232.245.27 port 59484 ssh2
Feb  3 23:42:05 serwer sshd\[12610\]: Invalid user ubuntu from 14.232.245.27 port 45266
Feb  3 23:42:05 serwer sshd\[12610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.245.27
Feb  3 23:42:06 serwer sshd\[12610\]: Failed password for invalid user ubuntu from 14
...
2020-02-04 21:14:11
180.250.28.34 attack
Feb  4 12:35:12 web8 sshd\[7937\]: Invalid user admin from 180.250.28.34
Feb  4 12:35:12 web8 sshd\[7937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.28.34
Feb  4 12:35:14 web8 sshd\[7937\]: Failed password for invalid user admin from 180.250.28.34 port 36636 ssh2
Feb  4 12:35:16 web8 sshd\[7937\]: Failed password for invalid user admin from 180.250.28.34 port 36636 ssh2
Feb  4 12:35:18 web8 sshd\[7937\]: Failed password for invalid user admin from 180.250.28.34 port 36636 ssh2
2020-02-04 21:27:35
193.188.22.229 attackspam
Tue Feb  4 05:20:50 2020 - Child process 38092 handling connection
Tue Feb  4 05:20:50 2020 - New connection from: 193.188.22.229:65063
Tue Feb  4 05:20:50 2020 - Sending data to client: [Login: ]
Tue Feb  4 05:20:50 2020 - Child aborting
Tue Feb  4 05:20:50 2020 - Reporting IP address: 193.188.22.229 - mflag: 0
Tue Feb  4 05:20:51 2020 - Killing connection
Tue Feb  4 05:41:30 2020 - Child process 38189 handling connection
Tue Feb  4 05:41:30 2020 - New connection from: 193.188.22.229:63965
Tue Feb  4 05:41:30 2020 - Sending data to client: [Login: ]
Tue Feb  4 05:41:31 2020 - Child aborting
Tue Feb  4 05:41:31 2020 - Reporting IP address: 193.188.22.229 - mflag: 0
2020-02-04 20:50:57
119.187.119.146 attackbotsspam
Unauthorized connection attempt detected from IP address 119.187.119.146 to port 2220 [J]
2020-02-04 21:36:08
31.13.115.8 attackspambots
[Tue Feb 04 11:52:49.129317 2020] [:error] [pid 9378:tid 139908148619008] [client 31.13.115.8:33724] [client 31.13.115.8] ModSecurity: Access denied with code 403 (phase 2). Found 3 byte(s) in REQUEST_URI outside range: 32-36,38-126. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1304"] [id "920272"] [msg "Invalid character in request (outside of printable chars below ascii 127)"] [data "REQUEST_URI=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamika/2020/01_Januari_2020/Das-III/Analisis_Dinamika_Atmosfer\\xe2\\x80\\x93Laut_Dan_Prediksi_Curah_Hujan_Update_Dasarian_III_Januari_2020.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [tag "paranoia-level/3"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamika/2020
...
2020-02-04 21:23:22
187.188.193.211 attack
Unauthorized connection attempt detected from IP address 187.188.193.211 to port 2220 [J]
2020-02-04 21:10:35
121.101.129.125 attackspam
Feb  4 05:52:40 grey postfix/smtpd\[14724\]: NOQUEUE: reject: RCPT from unknown\[121.101.129.125\]: 554 5.7.1 Service unavailable\; Client host \[121.101.129.125\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=121.101.129.125\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-04 21:28:30
110.36.218.182 attackspam
Unauthorized connection attempt detected from IP address 110.36.218.182 to port 80 [J]
2020-02-04 21:11:09
157.245.232.114 attack
Unauthorized connection attempt detected from IP address 157.245.232.114 to port 2220 [J]
2020-02-04 21:12:43
203.146.170.167 attackbotsspam
Unauthorized connection attempt detected from IP address 203.146.170.167 to port 2220 [J]
2020-02-04 20:46:45
185.184.79.32 attackbotsspam
Unauthorized connection attempt detected from IP address 185.184.79.32 to port 3399
2020-02-04 21:01:25

Recently Reported IPs

110.77.226.107 2606:4700:10::6816:2616 225.42.196.103 0.217.25.133
221.11.223.216 139.178.131.176 66.132.186.184 2606:4700:10::6816:2179
2606:4700:10::6814:9014 2606:4700:10::6816:2401 124.239.224.7 106.75.232.108
5.133.192.175 36.88.180.115 141.193.158.42 51.70.254.132
55.55.234.192 82.38.204.2 142.248.80.30 109.186.243.200