Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.131.249.57 attackbotsspam
Oct 13 19:47:46 ip-172-31-16-56 sshd\[2649\]: Invalid user teamspeak from 104.131.249.57\
Oct 13 19:47:48 ip-172-31-16-56 sshd\[2649\]: Failed password for invalid user teamspeak from 104.131.249.57 port 59778 ssh2\
Oct 13 19:52:54 ip-172-31-16-56 sshd\[2723\]: Invalid user webupload from 104.131.249.57\
Oct 13 19:52:56 ip-172-31-16-56 sshd\[2723\]: Failed password for invalid user webupload from 104.131.249.57 port 50902 ssh2\
Oct 13 19:55:40 ip-172-31-16-56 sshd\[2767\]: Invalid user kawase from 104.131.249.57\
2020-10-14 04:05:21
104.131.249.57 attackspambots
Oct 13 07:24:57 ajax sshd[13587]: Failed password for root from 104.131.249.57 port 57952 ssh2
2020-10-13 19:27:39
104.131.21.222 attackbots
firewall-block, port(s): 8088/tcp
2020-10-09 08:00:34
104.131.21.222 attackspambots
" "
2020-10-09 00:35:21
104.131.21.222 attack
[portscan] tcp/22 [SSH]
in blocklist.de:'listed [ssh]'
*(RWIN=65535)(10080947)
2020-10-08 16:32:07
104.131.249.57 attackspambots
Oct  7 19:24:31 scw-tender-jepsen sshd[1417]: Failed password for root from 104.131.249.57 port 41919 ssh2
2020-10-08 03:52:56
104.131.249.57 attackbotsspam
"Unauthorized connection attempt on SSHD detected"
2020-10-07 20:10:47
104.131.231.109 attackspam
Bruteforce detected by fail2ban
2020-09-16 03:47:49
104.131.231.109 attackbots
leo_www
2020-09-15 19:54:54
104.131.208.119 attackbots
104.131.208.119 - - [13/Sep/2020:14:07:06 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-13 23:13:41
104.131.208.119 attackbotsspam
104.131.208.119 - - [13/Sep/2020:06:08:52 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.208.119 - - [13/Sep/2020:06:08:54 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.208.119 - - [13/Sep/2020:06:08:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-13 15:07:45
104.131.208.119 attackspam
104.131.208.119 - - [12/Sep/2020:18:29:02 +0500] "GET /wp-login.php HTTP/1.1" 301 185 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-13 06:50:41
104.131.22.18 attackbotsspam
104.131.22.18 - - [11/Sep/2020:08:16:40 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.22.18 - - [11/Sep/2020:08:16:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.22.18 - - [11/Sep/2020:08:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-12 02:55:40
104.131.249.57 attackspambots
Sep 11 14:01:05 abendstille sshd\[2849\]: Invalid user sapena from 104.131.249.57
Sep 11 14:01:05 abendstille sshd\[2849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.249.57
Sep 11 14:01:07 abendstille sshd\[2849\]: Failed password for invalid user sapena from 104.131.249.57 port 51784 ssh2
Sep 11 14:05:34 abendstille sshd\[6914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.249.57  user=root
Sep 11 14:05:35 abendstille sshd\[6914\]: Failed password for root from 104.131.249.57 port 58571 ssh2
...
2020-09-11 20:08:06
104.131.22.18 attackspam
104.131.22.18 - - [11/Sep/2020:08:16:40 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.22.18 - - [11/Sep/2020:08:16:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.22.18 - - [11/Sep/2020:08:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-11 18:53:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.2.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53660
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.2.159.			IN	A

;; AUTHORITY SECTION:
.			500	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:38:35 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 159.2.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.2.131.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
93.87.76.74 attackspam
20/2/7@23:54:13: FAIL: Alarm-Intrusion address from=93.87.76.74
...
2020-02-08 17:10:00
51.15.87.74 attackbots
Fail2Ban - SSH Bruteforce Attempt
2020-02-08 17:08:44
213.157.48.139 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-08 17:25:51
218.158.229.172 attackbots
Honeypot attack, port: 5555, PTR: PTR record not found
2020-02-08 17:35:43
103.219.112.47 attackbots
Feb  8 10:36:35 legacy sshd[29013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.47
Feb  8 10:36:37 legacy sshd[29013]: Failed password for invalid user vro from 103.219.112.47 port 37142 ssh2
Feb  8 10:40:09 legacy sshd[29264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.47
...
2020-02-08 17:47:24
66.249.69.86 attackspambots
Automatic report - Banned IP Access
2020-02-08 17:44:45
211.250.233.33 attackspambots
port scan and connect, tcp 23 (telnet)
2020-02-08 17:22:29
80.211.13.167 attack
Feb  8 10:34:57 silence02 sshd[20862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.13.167
Feb  8 10:34:59 silence02 sshd[20862]: Failed password for invalid user laj from 80.211.13.167 port 42194 ssh2
Feb  8 10:38:12 silence02 sshd[21075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.13.167
2020-02-08 17:50:19
171.100.80.102 attack
Feb  8 04:54:14 *** sshd[32363]: Invalid user admin from 171.100.80.102
2020-02-08 17:09:09
211.37.46.212 attackspambots
Honeypot attack, port: 5555, PTR: PTR record not found
2020-02-08 17:19:08
106.13.25.179 attackbots
Feb  8 05:54:19 sxvn sshd[1285316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.179
2020-02-08 17:07:54
122.172.103.229 attackbots
Automatic report - Port Scan Attack
2020-02-08 17:39:41
109.50.174.45 attack
Feb  8 05:15:44 ns382633 sshd\[4599\]: Invalid user rdm from 109.50.174.45 port 37294
Feb  8 05:15:44 ns382633 sshd\[4599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.50.174.45
Feb  8 05:15:46 ns382633 sshd\[4599\]: Failed password for invalid user rdm from 109.50.174.45 port 37294 ssh2
Feb  8 05:53:36 ns382633 sshd\[10549\]: Invalid user iej from 109.50.174.45 port 32898
Feb  8 05:53:36 ns382633 sshd\[10549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.50.174.45
2020-02-08 17:35:26
49.146.41.98 attackbots
Honeypot attack, port: 445, PTR: dsl.49.146.41.98.pldt.net.
2020-02-08 17:48:42
91.126.203.98 attackspam
Honeypot attack, port: 5555, PTR: cli-5b7ecb62.ast.adamo.es.
2020-02-08 17:29:26

Recently Reported IPs

104.131.2.152 104.131.20.232 104.131.20.179 104.131.206.23
104.131.214.218 104.131.228.136 104.131.23.217 104.131.24.100
104.131.246.51 104.131.33.240 103.205.233.70 104.131.27.91
104.131.28.8 104.131.29.86 104.131.35.224 104.131.25.47
104.131.38.119 104.131.40.84 104.131.39.183 104.131.39.246