Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.131.81.54 attackbots
104.131.81.54 - - [21/Sep/2020:11:08:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.81.54 - - [21/Sep/2020:11:08:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.81.54 - - [21/Sep/2020:11:08:31 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-21 18:13:47
104.131.81.133 attackspambots
$f2bV_matches
2020-08-20 02:53:58
104.131.81.133 attack
>30 unauthorized SSH connections
2020-08-19 15:12:52
104.131.81.133 attack
Aug 18 20:46:00 vlre-nyc-1 sshd\[1684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.81.133  user=root
Aug 18 20:46:02 vlre-nyc-1 sshd\[1684\]: Failed password for root from 104.131.81.133 port 51798 ssh2
Aug 18 20:46:20 vlre-nyc-1 sshd\[1700\]: Invalid user oracle from 104.131.81.133
Aug 18 20:46:20 vlre-nyc-1 sshd\[1700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.81.133
Aug 18 20:46:22 vlre-nyc-1 sshd\[1700\]: Failed password for invalid user oracle from 104.131.81.133 port 43528 ssh2
...
2020-08-19 05:24:18
104.131.81.54 attackbots
104.131.81.54 - - [08/Aug/2020:05:35:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.81.54 - - [08/Aug/2020:05:35:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2059 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.81.54 - - [08/Aug/2020:05:35:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-08 13:07:24
104.131.81.54 attackbotsspam
C1,WP POST /suche/wp-login.php
2020-07-29 14:59:07
104.131.81.54 attack
104.131.81.54 - - [20/Jul/2020:06:03:51 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.81.54 - - [20/Jul/2020:06:03:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.131.81.54 - - [20/Jul/2020:06:03:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-20 12:13:01
104.131.81.54 attackspambots
techno.ws 104.131.81.54 [07/Jul/2020:09:13:30 +0200] "POST /wp-login.php HTTP/1.1" 200 5898 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
techno.ws 104.131.81.54 [07/Jul/2020:09:13:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4036 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-07 17:18:03
104.131.81.54 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-11-28 13:16:52
104.131.81.54 attack
Wordpress bruteforce
2019-11-18 05:48:51
104.131.81.54 attack
WordPress XMLRPC scan :: 104.131.81.54 0.320 - [04/Nov/2019:06:38:58  0000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2019-11-04 14:53:30
104.131.81.54 attack
WordPress login Brute force / Web App Attack on client site.
2019-10-24 13:09:26
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.81.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47249
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.81.85.			IN	A

;; AUTHORITY SECTION:
.			179	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:45:40 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 85.81.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.81.131.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
171.100.156.102 attackspam
May 14 06:26:25 Host-KLAX-C dovecot: imap-login: Disconnected (no auth attempts in 84 secs): user=<>, rip=171.100.156.102, lip=185.198.26.142, TLS: Disconnected, session=
...
2020-05-14 23:12:05
203.55.21.248 attack
TCP Port: 25      invalid blocked  spam-sorbs also justspam and s5h-net           (93)
2020-05-14 23:28:04
142.93.232.102 attackspam
SSH Login Bruteforce
2020-05-14 23:01:14
217.23.67.98 attackbotsspam
" "
2020-05-14 23:17:40
106.13.68.209 attackbots
May 14 14:26:30 haigwepa sshd[20753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.68.209 
May 14 14:26:32 haigwepa sshd[20753]: Failed password for invalid user admin from 106.13.68.209 port 38620 ssh2
...
2020-05-14 23:02:11
115.231.156.236 attack
2020-05-14 11:53:19,352 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 115.231.156.236
2020-05-14 12:32:41,805 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 115.231.156.236
2020-05-14 13:10:25,984 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 115.231.156.236
2020-05-14 13:50:06,353 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 115.231.156.236
2020-05-14 14:26:25,229 fail2ban.actions        [1093]: NOTICE  [sshd] Ban 115.231.156.236
...
2020-05-14 23:08:35
185.88.100.79 attackspambots
Chat Spam
2020-05-14 23:03:29
192.34.63.128 attackspambots
prod6
...
2020-05-14 23:02:58
116.105.195.243 attack
May 14 16:54:39 home sshd[15635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.105.195.243
May 14 16:54:41 home sshd[15635]: Failed password for invalid user user from 116.105.195.243 port 11616 ssh2
May 14 16:54:43 home sshd[15640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.105.195.243
...
2020-05-14 22:55:56
185.199.25.106 attack
May 14 15:38:31 mxgate1 postfix/postscreen[9392]: CONNECT from [185.199.25.106]:10180 to [176.31.12.44]:25
May 14 15:38:31 mxgate1 postfix/dnsblog[9449]: addr 185.199.25.106 listed by domain zen.spamhaus.org as 127.0.0.4
May 14 15:38:31 mxgate1 postfix/dnsblog[9450]: addr 185.199.25.106 listed by domain cbl.abuseat.org as 127.0.0.2
May 14 15:38:31 mxgate1 postfix/dnsblog[9394]: addr 185.199.25.106 listed by domain b.barracudacentral.org as 127.0.0.2
May 14 15:38:32 mxgate1 postfix/dnsblog[9415]: addr 185.199.25.106 listed by domain bl.spamcop.net as 127.0.0.2
May 14 15:38:37 mxgate1 postfix/postscreen[9392]: DNSBL rank 5 for [185.199.25.106]:10180
May x@x
May 14 15:38:37 mxgate1 postfix/postscreen[9392]: HANGUP after 0.34 from [185.199.25.106]:10180 in tests after SMTP handshake
May 14 15:38:37 mxgate1 postfix/postscreen[9392]: DISCONNECT [185.199.25.106]:10180


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.199.25.106
2020-05-14 23:09:47
119.84.8.43 attackspam
May 14 12:26:34 *** sshd[22223]: Invalid user jasper from 119.84.8.43
2020-05-14 22:59:48
159.65.217.53 attack
2020-05-14T12:38:49.164834shield sshd\[6140\]: Invalid user zjb from 159.65.217.53 port 37122
2020-05-14T12:38:49.175861shield sshd\[6140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.217.53
2020-05-14T12:38:50.992851shield sshd\[6140\]: Failed password for invalid user zjb from 159.65.217.53 port 37122 ssh2
2020-05-14T12:43:22.648807shield sshd\[7992\]: Invalid user admin from 159.65.217.53 port 44658
2020-05-14T12:43:22.652824shield sshd\[7992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.217.53
2020-05-14 22:54:24
222.186.31.204 attack
May 14 16:45:56 rotator sshd\[17680\]: Failed password for root from 222.186.31.204 port 12398 ssh2May 14 16:45:57 rotator sshd\[17680\]: Failed password for root from 222.186.31.204 port 12398 ssh2May 14 16:46:01 rotator sshd\[17680\]: Failed password for root from 222.186.31.204 port 12398 ssh2May 14 16:47:28 rotator sshd\[17697\]: Failed password for root from 222.186.31.204 port 21143 ssh2May 14 16:47:30 rotator sshd\[17697\]: Failed password for root from 222.186.31.204 port 21143 ssh2May 14 16:47:32 rotator sshd\[17697\]: Failed password for root from 222.186.31.204 port 21143 ssh2
...
2020-05-14 23:28:29
222.186.42.136 attackbotsspam
May 14 15:15:17 localhost sshd[1907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136  user=root
May 14 15:15:19 localhost sshd[1907]: Failed password for root from 222.186.42.136 port 24736 ssh2
May 14 15:15:22 localhost sshd[1907]: Failed password for root from 222.186.42.136 port 24736 ssh2
May 14 15:15:17 localhost sshd[1907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136  user=root
May 14 15:15:19 localhost sshd[1907]: Failed password for root from 222.186.42.136 port 24736 ssh2
May 14 15:15:22 localhost sshd[1907]: Failed password for root from 222.186.42.136 port 24736 ssh2
May 14 15:15:17 localhost sshd[1907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136  user=root
May 14 15:15:19 localhost sshd[1907]: Failed password for root from 222.186.42.136 port 24736 ssh2
May 14 15:15:22 localhost sshd[1907]: Failed pass
...
2020-05-14 23:16:22
122.51.198.90 attackspambots
May 14 14:26:51 vmd48417 sshd[567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.198.90
2020-05-14 22:44:06

Recently Reported IPs

104.131.67.121 104.131.82.215 112.66.108.180 104.131.9.47
104.131.9.51 104.131.91.233 104.131.96.172 104.131.91.41
112.66.108.19 104.148.110.219 104.148.27.21 104.148.124.243
104.148.21.156 104.148.89.21 104.148.36.71 104.148.76.148
112.66.108.210 104.148.89.22 104.148.80.110 104.148.27.153