Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
SSH Brute-Force Attack
2020-10-10 06:06:26
attackspam
Oct  9 12:08:42 santamaria sshd\[16538\]: Invalid user user1 from 104.131.45.150
Oct  9 12:08:42 santamaria sshd\[16538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150
Oct  9 12:08:44 santamaria sshd\[16538\]: Failed password for invalid user user1 from 104.131.45.150 port 57974 ssh2
...
2020-10-09 22:13:31
attack
$f2bV_matches
2020-10-09 14:03:29
attackbots
2020-10-04 13:27:23.806264-0500  localhost sshd[92460]: Failed password for root from 104.131.45.150 port 34974 ssh2
2020-10-05 04:06:22
attack
(sshd) Failed SSH login from 104.131.45.150 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  4 02:01:54 optimus sshd[12276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=root
Oct  4 02:01:56 optimus sshd[12276]: Failed password for root from 104.131.45.150 port 39428 ssh2
Oct  4 02:14:27 optimus sshd[29613]: Invalid user student7 from 104.131.45.150
Oct  4 02:14:27 optimus sshd[29613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Oct  4 02:14:29 optimus sshd[29613]: Failed password for invalid user student7 from 104.131.45.150 port 57512 ssh2
2020-10-04 19:56:44
attack
Sep 12 17:21:00 prox sshd[28018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep 12 17:21:03 prox sshd[28018]: Failed password for invalid user chloe from 104.131.45.150 port 45598 ssh2
2020-09-13 00:04:48
attack
refused connect from 104.131.45.150 (104.131.45.150) multiples intentos de violar acceso
2020-09-12 16:05:16
attackspam
2020-09-11T23:28:14.926484abusebot-5.cloudsearch.cf sshd[19384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=root
2020-09-11T23:28:16.784083abusebot-5.cloudsearch.cf sshd[19384]: Failed password for root from 104.131.45.150 port 36014 ssh2
2020-09-11T23:32:02.067762abusebot-5.cloudsearch.cf sshd[19495]: Invalid user kevin from 104.131.45.150 port 43254
2020-09-11T23:32:02.074363abusebot-5.cloudsearch.cf sshd[19495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150
2020-09-11T23:32:02.067762abusebot-5.cloudsearch.cf sshd[19495]: Invalid user kevin from 104.131.45.150 port 43254
2020-09-11T23:32:03.565556abusebot-5.cloudsearch.cf sshd[19495]: Failed password for invalid user kevin from 104.131.45.150 port 43254 ssh2
2020-09-11T23:34:33.906263abusebot-5.cloudsearch.cf sshd[19552]: Invalid user ec2-user from 104.131.45.150 port 37400
...
2020-09-12 07:52:05
attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-09-05 21:03:23
attackspam
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:53 l02a sshd[10943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:55 l02a sshd[10943]: Failed password for invalid user lzy from 104.131.45.150 port 48500 ssh2
2020-09-05 05:27:16
attackbotsspam
Sep  1 11:25:58 rancher-0 sshd[1383586]: Invalid user jader from 104.131.45.150 port 47446
Sep  1 11:25:59 rancher-0 sshd[1383586]: Failed password for invalid user jader from 104.131.45.150 port 47446 ssh2
...
2020-09-01 18:16:56
attackbotsspam
detected by Fail2Ban
2020-08-26 01:17:18
attackspam
20 attempts against mh-ssh on cloud
2020-08-19 13:23:29
attackbotsspam
SSH_bulk_scanner
2020-08-16 16:37:40
attack
Lines containing failures of 104.131.45.150
Aug  3 00:07:20 shared02 sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:07:22 shared02 sshd[17393]: Failed password for r.r from 104.131.45.150 port 41584 ssh2
Aug  3 00:07:22 shared02 sshd[17393]: Received disconnect from 104.131.45.150 port 41584:11: Bye Bye [preauth]
Aug  3 00:07:22 shared02 sshd[17393]: Disconnected from authenticating user r.r 104.131.45.150 port 41584 [preauth]
Aug  3 00:18:21 shared02 sshd[23428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:18:23 shared02 sshd[23428]: Failed password for r.r from 104.131.45.150 port 33536 ssh2
Aug  3 00:18:23 shared02 sshd[23428]: Received disconnect from 104.131.45.150 port 33536:11: Bye Bye [preauth]
Aug  3 00:18:23 shared02 sshd[23428]: Disconnected from authenticating user r.r 104.131.45.150 port 33536........
------------------------------
2020-08-09 05:31:48
attack
Lines containing failures of 104.131.45.150
Aug  3 00:07:20 shared02 sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:07:22 shared02 sshd[17393]: Failed password for r.r from 104.131.45.150 port 41584 ssh2
Aug  3 00:07:22 shared02 sshd[17393]: Received disconnect from 104.131.45.150 port 41584:11: Bye Bye [preauth]
Aug  3 00:07:22 shared02 sshd[17393]: Disconnected from authenticating user r.r 104.131.45.150 port 41584 [preauth]
Aug  3 00:18:21 shared02 sshd[23428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:18:23 shared02 sshd[23428]: Failed password for r.r from 104.131.45.150 port 33536 ssh2
Aug  3 00:18:23 shared02 sshd[23428]: Received disconnect from 104.131.45.150 port 33536:11: Bye Bye [preauth]
Aug  3 00:18:23 shared02 sshd[23428]: Disconnected from authenticating user r.r 104.131.45.150 port 33536........
------------------------------
2020-08-06 08:44:38
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.45.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56165
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.131.45.150.			IN	A

;; AUTHORITY SECTION:
.			302	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080301 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 04 11:17:31 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 150.45.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 150.45.131.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
159.65.236.182 attackbotsspam
Jun 11 23:53:50 sso sshd[17541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.236.182
Jun 11 23:53:51 sso sshd[17541]: Failed password for invalid user dj from 159.65.236.182 port 44608 ssh2
...
2020-06-12 06:13:18
189.126.162.131 attack
Automatic report - Port Scan Attack
2020-06-12 06:01:36
59.41.93.166 attack
SSH Invalid Login
2020-06-12 06:16:35
51.158.162.242 attackspam
671. On Jun 11 2020 experienced a Brute Force SSH login attempt -> 7 unique times by 51.158.162.242.
2020-06-12 06:15:31
112.85.42.174 attack
Jun 12 00:28:50 vmi345603 sshd[14880]: Failed password for root from 112.85.42.174 port 37478 ssh2
Jun 12 00:28:53 vmi345603 sshd[14880]: Failed password for root from 112.85.42.174 port 37478 ssh2
...
2020-06-12 06:38:51
121.170.195.137 attackspam
Jun 12 00:08:47 OPSO sshd\[1961\]: Invalid user vitor from 121.170.195.137 port 43922
Jun 12 00:08:47 OPSO sshd\[1961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.170.195.137
Jun 12 00:08:49 OPSO sshd\[1961\]: Failed password for invalid user vitor from 121.170.195.137 port 43922 ssh2
Jun 12 00:11:34 OPSO sshd\[2640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.170.195.137  user=root
Jun 12 00:11:37 OPSO sshd\[2640\]: Failed password for root from 121.170.195.137 port 58652 ssh2
2020-06-12 06:26:40
186.95.130.16 attackspambots
1591914539 - 06/12/2020 00:28:59 Host: 186.95.130.16/186.95.130.16 Port: 445 TCP Blocked
2020-06-12 06:34:12
203.159.249.215 attack
Jun 11 21:42:29 scw-6657dc sshd[23294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.159.249.215
Jun 11 21:42:29 scw-6657dc sshd[23294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.159.249.215
Jun 11 21:42:31 scw-6657dc sshd[23294]: Failed password for invalid user spamers from 203.159.249.215 port 50220 ssh2
...
2020-06-12 06:02:29
218.92.0.172 attackspambots
Triggered by Fail2Ban at Ares web server
2020-06-12 06:33:51
194.26.29.52 attackspambots
Jun 11 23:55:50 debian-2gb-nbg1-2 kernel: \[14171274.811463\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.52 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=45536 PROTO=TCP SPT=51529 DPT=1351 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-12 06:05:07
162.243.135.167 attack
IP 162.243.135.167 attacked honeypot on port: 873 at 6/11/2020 9:38:10 PM
2020-06-12 06:04:19
192.163.207.200 attackbotsspam
Malicious/Probing: /wp/wp-login.php
2020-06-12 06:35:24
134.175.32.95 attackbotsspam
Invalid user lfp from 134.175.32.95 port 47932
2020-06-12 06:20:53
51.158.162.242 attackspam
DATE:2020-06-12 00:34:45, IP:51.158.162.242, PORT:ssh SSH brute force auth (docker-dc)
2020-06-12 06:37:41
222.186.173.226 attackbots
Jun 12 00:11:08 vmi345603 sshd[6884]: Failed password for root from 222.186.173.226 port 22835 ssh2
Jun 12 00:11:11 vmi345603 sshd[6884]: Failed password for root from 222.186.173.226 port 22835 ssh2
...
2020-06-12 06:11:53

Recently Reported IPs

14.139.209.210 21.99.12.15 51.79.21.92 14.102.24.136
170.79.170.186 157.48.193.126 191.83.174.128 103.14.38.145
62.210.188.216 200.171.230.243 157.50.86.92 114.34.73.176
36.232.124.157 73.3.123.104 49.234.78.175 85.95.178.149
80.140.44.65 113.118.205.141 49.135.42.133 110.178.77.161