Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
SSH Brute-Force Attack
2020-10-10 06:06:26
attackspam
Oct  9 12:08:42 santamaria sshd\[16538\]: Invalid user user1 from 104.131.45.150
Oct  9 12:08:42 santamaria sshd\[16538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150
Oct  9 12:08:44 santamaria sshd\[16538\]: Failed password for invalid user user1 from 104.131.45.150 port 57974 ssh2
...
2020-10-09 22:13:31
attack
$f2bV_matches
2020-10-09 14:03:29
attackbots
2020-10-04 13:27:23.806264-0500  localhost sshd[92460]: Failed password for root from 104.131.45.150 port 34974 ssh2
2020-10-05 04:06:22
attack
(sshd) Failed SSH login from 104.131.45.150 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  4 02:01:54 optimus sshd[12276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=root
Oct  4 02:01:56 optimus sshd[12276]: Failed password for root from 104.131.45.150 port 39428 ssh2
Oct  4 02:14:27 optimus sshd[29613]: Invalid user student7 from 104.131.45.150
Oct  4 02:14:27 optimus sshd[29613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Oct  4 02:14:29 optimus sshd[29613]: Failed password for invalid user student7 from 104.131.45.150 port 57512 ssh2
2020-10-04 19:56:44
attack
Sep 12 17:21:00 prox sshd[28018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep 12 17:21:03 prox sshd[28018]: Failed password for invalid user chloe from 104.131.45.150 port 45598 ssh2
2020-09-13 00:04:48
attack
refused connect from 104.131.45.150 (104.131.45.150) multiples intentos de violar acceso
2020-09-12 16:05:16
attackspam
2020-09-11T23:28:14.926484abusebot-5.cloudsearch.cf sshd[19384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=root
2020-09-11T23:28:16.784083abusebot-5.cloudsearch.cf sshd[19384]: Failed password for root from 104.131.45.150 port 36014 ssh2
2020-09-11T23:32:02.067762abusebot-5.cloudsearch.cf sshd[19495]: Invalid user kevin from 104.131.45.150 port 43254
2020-09-11T23:32:02.074363abusebot-5.cloudsearch.cf sshd[19495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150
2020-09-11T23:32:02.067762abusebot-5.cloudsearch.cf sshd[19495]: Invalid user kevin from 104.131.45.150 port 43254
2020-09-11T23:32:03.565556abusebot-5.cloudsearch.cf sshd[19495]: Failed password for invalid user kevin from 104.131.45.150 port 43254 ssh2
2020-09-11T23:34:33.906263abusebot-5.cloudsearch.cf sshd[19552]: Invalid user ec2-user from 104.131.45.150 port 37400
...
2020-09-12 07:52:05
attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-09-05 21:03:23
attackspam
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:53 l02a sshd[10943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:55 l02a sshd[10943]: Failed password for invalid user lzy from 104.131.45.150 port 48500 ssh2
2020-09-05 05:27:16
attackbotsspam
Sep  1 11:25:58 rancher-0 sshd[1383586]: Invalid user jader from 104.131.45.150 port 47446
Sep  1 11:25:59 rancher-0 sshd[1383586]: Failed password for invalid user jader from 104.131.45.150 port 47446 ssh2
...
2020-09-01 18:16:56
attackbotsspam
detected by Fail2Ban
2020-08-26 01:17:18
attackspam
20 attempts against mh-ssh on cloud
2020-08-19 13:23:29
attackbotsspam
SSH_bulk_scanner
2020-08-16 16:37:40
attack
Lines containing failures of 104.131.45.150
Aug  3 00:07:20 shared02 sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:07:22 shared02 sshd[17393]: Failed password for r.r from 104.131.45.150 port 41584 ssh2
Aug  3 00:07:22 shared02 sshd[17393]: Received disconnect from 104.131.45.150 port 41584:11: Bye Bye [preauth]
Aug  3 00:07:22 shared02 sshd[17393]: Disconnected from authenticating user r.r 104.131.45.150 port 41584 [preauth]
Aug  3 00:18:21 shared02 sshd[23428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:18:23 shared02 sshd[23428]: Failed password for r.r from 104.131.45.150 port 33536 ssh2
Aug  3 00:18:23 shared02 sshd[23428]: Received disconnect from 104.131.45.150 port 33536:11: Bye Bye [preauth]
Aug  3 00:18:23 shared02 sshd[23428]: Disconnected from authenticating user r.r 104.131.45.150 port 33536........
------------------------------
2020-08-09 05:31:48
attack
Lines containing failures of 104.131.45.150
Aug  3 00:07:20 shared02 sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:07:22 shared02 sshd[17393]: Failed password for r.r from 104.131.45.150 port 41584 ssh2
Aug  3 00:07:22 shared02 sshd[17393]: Received disconnect from 104.131.45.150 port 41584:11: Bye Bye [preauth]
Aug  3 00:07:22 shared02 sshd[17393]: Disconnected from authenticating user r.r 104.131.45.150 port 41584 [preauth]
Aug  3 00:18:21 shared02 sshd[23428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:18:23 shared02 sshd[23428]: Failed password for r.r from 104.131.45.150 port 33536 ssh2
Aug  3 00:18:23 shared02 sshd[23428]: Received disconnect from 104.131.45.150 port 33536:11: Bye Bye [preauth]
Aug  3 00:18:23 shared02 sshd[23428]: Disconnected from authenticating user r.r 104.131.45.150 port 33536........
------------------------------
2020-08-06 08:44:38
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.45.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56165
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.131.45.150.			IN	A

;; AUTHORITY SECTION:
.			302	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080301 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 04 11:17:31 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 150.45.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 150.45.131.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
145.239.91.88 attackbots
Sep 28 20:06:13 vps691689 sshd[22580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.91.88
Sep 28 20:06:16 vps691689 sshd[22580]: Failed password for invalid user appuser123456 from 145.239.91.88 port 37470 ssh2
Sep 28 20:10:15 vps691689 sshd[22689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.91.88
...
2019-09-29 02:18:21
42.115.221.40 attackspam
Sep 28 14:34:09 TORMINT sshd\[21488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40  user=root
Sep 28 14:34:11 TORMINT sshd\[21488\]: Failed password for root from 42.115.221.40 port 39948 ssh2
Sep 28 14:38:56 TORMINT sshd\[21860\]: Invalid user admire from 42.115.221.40
Sep 28 14:38:56 TORMINT sshd\[21860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.115.221.40
...
2019-09-29 02:42:20
13.58.139.61 attackspambots
2019-09-26T08:10:27.7343261495-001 sshd[64088]: Invalid user admin from 13.58.139.61 port 44050
2019-09-26T08:10:27.7410221495-001 sshd[64088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-58-139-61.us-east-2.compute.amazonaws.com
2019-09-26T08:10:29.5290231495-001 sshd[64088]: Failed password for invalid user admin from 13.58.139.61 port 44050 ssh2
2019-09-26T08:19:31.0615531495-001 sshd[64790]: Invalid user temp from 13.58.139.61 port 41894
2019-09-26T08:19:31.0684681495-001 sshd[64790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-58-139-61.us-east-2.compute.amazonaws.com
2019-09-26T08:19:33.5372671495-001 sshd[64790]: Failed password for invalid user temp from 13.58.139.61 port 41894 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.58.139.61
2019-09-29 02:21:06
51.79.128.154 attackbotsspam
Unauthorized connection attempt from IP address 51.79.128.154 on Port 3389(RDP)
2019-09-29 02:19:14
124.156.210.20 attackspambots
scan z
2019-09-29 02:16:31
92.223.159.3 attackspam
Sep 28 17:52:14 XXXXXX sshd[54223]: Invalid user zou from 92.223.159.3 port 46994
2019-09-29 02:37:37
178.32.105.63 attackspam
Sep 28 18:06:54 SilenceServices sshd[29749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.105.63
Sep 28 18:06:57 SilenceServices sshd[29749]: Failed password for invalid user s4les from 178.32.105.63 port 46318 ssh2
Sep 28 18:10:57 SilenceServices sshd[32295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.105.63
2019-09-29 02:48:17
176.215.77.245 attackbots
Sep 28 07:51:42 hcbb sshd\[1530\]: Invalid user noi from 176.215.77.245
Sep 28 07:51:42 hcbb sshd\[1530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.215.77.245
Sep 28 07:51:45 hcbb sshd\[1530\]: Failed password for invalid user noi from 176.215.77.245 port 58442 ssh2
Sep 28 07:55:53 hcbb sshd\[1919\]: Invalid user zi from 176.215.77.245
Sep 28 07:55:53 hcbb sshd\[1919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.215.77.245
2019-09-29 02:41:11
167.71.55.1 attackspam
Sep 28 19:39:17 microserver sshd[53112]: Invalid user mwang2 from 167.71.55.1 port 44948
Sep 28 19:39:17 microserver sshd[53112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.55.1
Sep 28 19:39:20 microserver sshd[53112]: Failed password for invalid user mwang2 from 167.71.55.1 port 44948 ssh2
Sep 28 19:43:40 microserver sshd[53791]: Invalid user ruan from 167.71.55.1 port 57746
Sep 28 19:43:40 microserver sshd[53791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.55.1
Sep 28 19:56:31 microserver sshd[55844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.55.1  user=games
Sep 28 19:56:33 microserver sshd[55844]: Failed password for games from 167.71.55.1 port 39690 ssh2
Sep 28 20:00:51 microserver sshd[56533]: Invalid user devhdfc from 167.71.55.1 port 52490
Sep 28 20:00:51 microserver sshd[56533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t
2019-09-29 02:19:56
193.32.163.182 attackspambots
SSH Bruteforce attempt
2019-09-29 02:12:48
93.189.101.5 attack
Sep 28 19:46:58 vmd17057 sshd\[18333\]: Invalid user admin from 93.189.101.5 port 1417
Sep 28 19:46:58 vmd17057 sshd\[18333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.189.101.5
Sep 28 19:47:01 vmd17057 sshd\[18333\]: Failed password for invalid user admin from 93.189.101.5 port 1417 ssh2
...
2019-09-29 02:32:18
134.209.51.46 attackspam
$f2bV_matches
2019-09-29 02:15:51
157.245.186.236 attackbots
Sep 26 15:37:40 ns342841 sshd[25162]: Received disconnect from 157.245.186.236: 11: Bye Bye
Sep 26 15:37:42 ns342841 sshd[25164]: Invalid user admin from 157.245.186.236
Sep 26 15:37:42 ns342841 sshd[25165]: Received disconnect from 157.245.186.236: 11: Bye Bye
Sep 26 15:37:43 ns342841 sshd[25166]: Invalid user admin from 157.245.186.236
Sep 26 15:37:43 ns342841 sshd[25167]: Received disconnect from 157.245.186.236: 11: Bye Bye
Sep 26 15:37:44 ns342841 sshd[25169]: Invalid user user from 157.245.186.236
Sep 26 15:37:44 ns342841 sshd[25170]: Received disconnect from 157.245.186.236: 11: Bye Bye
Sep 26 15:37:46 ns342841 sshd[25171]: Invalid user ubnt from 157.245.186.236
Sep 26 15:37:46 ns342841 sshd[25172]: Received disconnect from 157.245.186.236: 11: Bye Bye
Sep 26 15:37:47 ns342841 sshd[25173]: Invalid user admin from 157.245.186.236
Sep 26 15:37:47 ns342841 sshd[25174]: Received disconnect from 157.245.186.236: 11: Bye Bye

........
-----------------------------------------------
https://www.blocklist.de/e
2019-09-29 02:27:05
160.153.147.158 attack
xmlrpc attack
2019-09-29 02:12:10
51.38.234.224 attackspambots
Sep 28 17:53:27 icinga sshd[11260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.234.224
Sep 28 17:53:28 icinga sshd[11260]: Failed password for invalid user usuario from 51.38.234.224 port 49502 ssh2
...
2019-09-29 02:26:19

Recently Reported IPs

14.139.209.210 21.99.12.15 51.79.21.92 14.102.24.136
170.79.170.186 157.48.193.126 191.83.174.128 103.14.38.145
62.210.188.216 200.171.230.243 157.50.86.92 114.34.73.176
36.232.124.157 73.3.123.104 49.234.78.175 85.95.178.149
80.140.44.65 113.118.205.141 49.135.42.133 110.178.77.161