Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.131.45.150 attackbotsspam
SSH Brute-Force Attack
2020-10-10 06:06:26
104.131.45.150 attackspam
Oct  9 12:08:42 santamaria sshd\[16538\]: Invalid user user1 from 104.131.45.150
Oct  9 12:08:42 santamaria sshd\[16538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150
Oct  9 12:08:44 santamaria sshd\[16538\]: Failed password for invalid user user1 from 104.131.45.150 port 57974 ssh2
...
2020-10-09 22:13:31
104.131.45.150 attack
$f2bV_matches
2020-10-09 14:03:29
104.131.45.150 attackbots
2020-10-04 13:27:23.806264-0500  localhost sshd[92460]: Failed password for root from 104.131.45.150 port 34974 ssh2
2020-10-05 04:06:22
104.131.45.150 attack
(sshd) Failed SSH login from 104.131.45.150 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  4 02:01:54 optimus sshd[12276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=root
Oct  4 02:01:56 optimus sshd[12276]: Failed password for root from 104.131.45.150 port 39428 ssh2
Oct  4 02:14:27 optimus sshd[29613]: Invalid user student7 from 104.131.45.150
Oct  4 02:14:27 optimus sshd[29613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Oct  4 02:14:29 optimus sshd[29613]: Failed password for invalid user student7 from 104.131.45.150 port 57512 ssh2
2020-10-04 19:56:44
104.131.45.150 attack
Sep 12 17:21:00 prox sshd[28018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep 12 17:21:03 prox sshd[28018]: Failed password for invalid user chloe from 104.131.45.150 port 45598 ssh2
2020-09-13 00:04:48
104.131.45.150 attack
refused connect from 104.131.45.150 (104.131.45.150) multiples intentos de violar acceso
2020-09-12 16:05:16
104.131.45.150 attackspam
2020-09-11T23:28:14.926484abusebot-5.cloudsearch.cf sshd[19384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=root
2020-09-11T23:28:16.784083abusebot-5.cloudsearch.cf sshd[19384]: Failed password for root from 104.131.45.150 port 36014 ssh2
2020-09-11T23:32:02.067762abusebot-5.cloudsearch.cf sshd[19495]: Invalid user kevin from 104.131.45.150 port 43254
2020-09-11T23:32:02.074363abusebot-5.cloudsearch.cf sshd[19495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150
2020-09-11T23:32:02.067762abusebot-5.cloudsearch.cf sshd[19495]: Invalid user kevin from 104.131.45.150 port 43254
2020-09-11T23:32:03.565556abusebot-5.cloudsearch.cf sshd[19495]: Failed password for invalid user kevin from 104.131.45.150 port 43254 ssh2
2020-09-11T23:34:33.906263abusebot-5.cloudsearch.cf sshd[19552]: Invalid user ec2-user from 104.131.45.150 port 37400
...
2020-09-12 07:52:05
104.131.45.150 attackspambots
"Unauthorized connection attempt on SSHD detected"
2020-09-05 21:03:23
104.131.45.150 attackspam
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:53 l02a sshd[10943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150 
Sep  4 22:05:53 l02a sshd[10943]: Invalid user lzy from 104.131.45.150
Sep  4 22:05:55 l02a sshd[10943]: Failed password for invalid user lzy from 104.131.45.150 port 48500 ssh2
2020-09-05 05:27:16
104.131.45.150 attackbotsspam
Sep  1 11:25:58 rancher-0 sshd[1383586]: Invalid user jader from 104.131.45.150 port 47446
Sep  1 11:25:59 rancher-0 sshd[1383586]: Failed password for invalid user jader from 104.131.45.150 port 47446 ssh2
...
2020-09-01 18:16:56
104.131.45.150 attackbotsspam
detected by Fail2Ban
2020-08-26 01:17:18
104.131.45.150 attackspam
20 attempts against mh-ssh on cloud
2020-08-19 13:23:29
104.131.45.150 attackbotsspam
SSH_bulk_scanner
2020-08-16 16:37:40
104.131.45.150 attack
Lines containing failures of 104.131.45.150
Aug  3 00:07:20 shared02 sshd[17393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:07:22 shared02 sshd[17393]: Failed password for r.r from 104.131.45.150 port 41584 ssh2
Aug  3 00:07:22 shared02 sshd[17393]: Received disconnect from 104.131.45.150 port 41584:11: Bye Bye [preauth]
Aug  3 00:07:22 shared02 sshd[17393]: Disconnected from authenticating user r.r 104.131.45.150 port 41584 [preauth]
Aug  3 00:18:21 shared02 sshd[23428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.45.150  user=r.r
Aug  3 00:18:23 shared02 sshd[23428]: Failed password for r.r from 104.131.45.150 port 33536 ssh2
Aug  3 00:18:23 shared02 sshd[23428]: Received disconnect from 104.131.45.150 port 33536:11: Bye Bye [preauth]
Aug  3 00:18:23 shared02 sshd[23428]: Disconnected from authenticating user r.r 104.131.45.150 port 33536........
------------------------------
2020-08-09 05:31:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.45.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.45.159.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052502 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 26 06:06:18 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 159.45.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.45.131.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
141.98.9.160 attackbotsspam
2020-07-26T01:14:09.547202vps751288.ovh.net sshd\[21974\]: Invalid user user from 141.98.9.160 port 41327
2020-07-26T01:14:09.550226vps751288.ovh.net sshd\[21974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
2020-07-26T01:14:11.409023vps751288.ovh.net sshd\[21974\]: Failed password for invalid user user from 141.98.9.160 port 41327 ssh2
2020-07-26T01:14:34.051241vps751288.ovh.net sshd\[22002\]: Invalid user guest from 141.98.9.160 port 39815
2020-07-26T01:14:34.059086vps751288.ovh.net sshd\[22002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
2020-07-26 07:57:04
35.226.254.225 attackspambots
35.226.254.225 - - [25/Jul/2020:18:08:16 -0500] "GET https://www.ad5gb.com/ HTTP/1.1" 400 346 000 0 0 0 318 295 0 0 0 NONE FIN FIN ERR_INVALID_REQ
2020-07-26 08:19:39
51.89.136.104 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-26 12:05:15
51.68.196.163 attackspambots
Jul 26 01:17:03 vps639187 sshd\[6642\]: Invalid user satis from 51.68.196.163 port 60030
Jul 26 01:17:03 vps639187 sshd\[6642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.196.163
Jul 26 01:17:05 vps639187 sshd\[6642\]: Failed password for invalid user satis from 51.68.196.163 port 60030 ssh2
...
2020-07-26 08:19:19
106.12.132.224 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-26 08:23:06
45.144.65.49 attack
Invalid user admin from 45.144.65.49 port 49709
2020-07-26 12:06:05
5.188.84.130 spam
спам
2020-07-26 11:50:54
49.234.27.90 attack
2020-07-26T06:11:49.396412hostname sshd[109900]: Invalid user akazam from 49.234.27.90 port 34722
...
2020-07-26 08:14:40
61.177.172.128 attackbotsspam
Jul 26 06:09:43 nextcloud sshd\[15789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128  user=root
Jul 26 06:09:46 nextcloud sshd\[15789\]: Failed password for root from 61.177.172.128 port 55393 ssh2
Jul 26 06:10:01 nextcloud sshd\[15789\]: Failed password for root from 61.177.172.128 port 55393 ssh2
2020-07-26 12:11:30
5.188.206.196 attackbots
Jul 26 01:37:23 mail.srvfarm.net postfix/smtpd[949002]: warning: unknown[5.188.206.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 26 01:37:24 mail.srvfarm.net postfix/smtpd[949002]: lost connection after AUTH from unknown[5.188.206.196]
Jul 26 01:37:32 mail.srvfarm.net postfix/smtpd[948985]: lost connection after AUTH from unknown[5.188.206.196]
Jul 26 01:37:41 mail.srvfarm.net postfix/smtpd[948984]: warning: unknown[5.188.206.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 26 01:37:41 mail.srvfarm.net postfix/smtpd[948984]: lost connection after AUTH from unknown[5.188.206.196]
2020-07-26 07:56:30
120.52.120.5 attackbotsspam
Jul 26 05:54:00 abendstille sshd\[5484\]: Invalid user autocad from 120.52.120.5
Jul 26 05:54:00 abendstille sshd\[5484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.120.5
Jul 26 05:54:01 abendstille sshd\[5484\]: Failed password for invalid user autocad from 120.52.120.5 port 52859 ssh2
Jul 26 06:00:49 abendstille sshd\[12737\]: Invalid user arnaud from 120.52.120.5
Jul 26 06:00:49 abendstille sshd\[12737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.120.5
...
2020-07-26 12:08:15
51.83.97.44 attackspam
Ssh brute force
2020-07-26 08:16:39
165.227.193.157 attackbotsspam
Invalid user ydk from 165.227.193.157 port 38032
2020-07-26 12:03:42
81.94.255.12 attack
Jul 26 04:38:23 lunarastro sshd[1265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.94.255.12 
Jul 26 04:38:24 lunarastro sshd[1265]: Failed password for invalid user bet from 81.94.255.12 port 33656 ssh2
2020-07-26 08:14:08
23.95.229.114 attackbotsspam
Jul 26 01:08:24 debian-2gb-nbg1-2 kernel: \[17977017.254691\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=23.95.229.114 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=56992 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0
2020-07-26 08:15:11

Recently Reported IPs

104.131.34.91 104.131.5.182 104.16.199.36 104.16.200.36
104.16.201.59 104.16.203.18 104.16.203.60 104.16.204.18
104.16.212.44 104.16.214.18 104.16.220.33 104.16.221.33
104.16.222.33 104.16.223.33 104.16.224.16 104.16.224.33
104.16.225.106 104.16.226.32 104.16.230.136 104.16.231.136