Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Barderro Host

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 21 proto: tcp cat: Misc Attackbytes: 60
2020-09-17 19:17:45
attackspam
Jul  4 19:26:15 debian-2gb-nbg1-2 kernel: \[16142193.200851\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.140.188.54 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=28465 PROTO=TCP SPT=55287 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-05 03:29:50
attackbotsspam
ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: TCP cat: Potentially Bad Traffic
2020-06-21 06:42:30
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 99 - port: 21 proto: TCP cat: Misc Attack
2020-05-03 06:41:14
attackspam
1582126820 - 02/19/2020 22:40:20 Host: c180bb.rederatural.com/104.140.188.54 Port: 23 TCP Blocked
...
2020-02-19 23:58:03
attack
Unauthorized connection attempt detected from IP address 104.140.188.54 to port 5060 [J]
2020-01-30 01:58:51
attackspam
Unauthorized connection attempt detected from IP address 104.140.188.54 to port 8444
2020-01-14 18:04:51
attackbots
Honeypot hit.
2019-12-28 05:43:56
attackbots
firewall-block, port(s): 5060/tcp
2019-12-25 03:50:58
attack
Honeypot attack, port: 23, PTR: c180bb.rederatural.com.
2019-12-10 06:30:34
attackbots
RDP brute force attack detected by fail2ban
2019-11-22 07:34:51
attackspam
firewall-block, port(s): 3306/tcp
2019-11-16 02:38:22
attackbotsspam
ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: TCP cat: Potentially Bad Traffic
2019-10-28 07:25:48
attackbots
Port scan
2019-10-05 08:20:02
attack
10443/tcp 21/tcp 1433/tcp...
[2019-07-12/09-07]65pkt,13pt.(tcp),1pt.(udp)
2019-09-08 14:11:56
attackbotsspam
Port scan
2019-09-05 15:50:22
attackspam
firewall-block, port(s): 161/udp
2019-08-17 03:13:45
attackspam
Port Scan: TCP/21
2019-08-05 10:48:01
attackspambots
Honeypot attack, port: 23, PTR: c180bb.rederatural.com.
2019-07-28 02:44:23
attackspambots
firewall-block, port(s): 161/udp
2019-07-06 06:57:04
attack
port scan and connect, tcp 5432 (postgresql)
2019-06-30 06:02:34
Comments on same subnet:
IP Type Details Datetime
104.140.188.22 attack
 TCP (SYN) 104.140.188.22:51771 -> port 23, len 44
2020-10-06 04:32:23
104.140.188.22 attackbots
TCP port : 5900
2020-10-05 20:34:28
104.140.188.22 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-05 12:24:11
104.140.188.10 attackbotsspam
23/tcp 5432/tcp 5060/tcp...
[2020-07-29/09-27]47pkt,8pt.(tcp),1pt.(udp)
2020-09-29 00:18:52
104.140.188.10 attackspam
23/tcp 5432/tcp 5060/tcp...
[2020-07-29/09-27]47pkt,8pt.(tcp),1pt.(udp)
2020-09-28 16:21:09
104.140.188.6 attackbots
Tried our host z.
2020-09-28 05:03:38
104.140.188.6 attackbotsspam
1433/tcp 3306/tcp 3389/tcp...
[2020-07-27/09-26]32pkt,8pt.(tcp),1pt.(udp)
2020-09-27 21:21:47
104.140.188.6 attack
1433/tcp 3306/tcp 3389/tcp...
[2020-07-27/09-26]32pkt,8pt.(tcp),1pt.(udp)
2020-09-27 13:03:33
104.140.188.26 attackbots
Port scan denied
2020-09-24 20:16:38
104.140.188.26 attackbots
 TCP (SYN) 104.140.188.26:58205 -> port 3389, len 44
2020-09-24 12:16:53
104.140.188.26 attackspambots
Automatic report - Banned IP Access
2020-09-24 03:45:53
104.140.188.2 attackspambots
Honeypot hit.
2020-09-24 01:45:39
104.140.188.2 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-23 17:51:36
104.140.188.58 attackbots
 TCP (SYN) 104.140.188.58:50906 -> port 21, len 44
2020-09-23 02:43:03
104.140.188.58 attackspambots
 TCP (SYN) 104.140.188.58:61154 -> port 1433, len 44
2020-09-22 18:48:57
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.140.188.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38492
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.140.188.54.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 30 06:02:29 CST 2019
;; MSG SIZE  rcvd: 118
Host info
54.188.140.104.in-addr.arpa domain name pointer c180bb.rederatural.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
54.188.140.104.in-addr.arpa	name = apps32c5.applied8lunch.space.
54.188.140.104.in-addr.arpa	name = c180bb.rederatural.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
191.243.92.1 attack
445/tcp
[2020-09-04]1pkt
2020-09-05 12:54:20
111.229.109.26 attackspambots
2020-09-04T17:44:44.715784shield sshd\[12054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.109.26  user=root
2020-09-04T17:44:46.675209shield sshd\[12054\]: Failed password for root from 111.229.109.26 port 40760 ssh2
2020-09-04T17:44:48.703815shield sshd\[12058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.109.26  user=root
2020-09-04T17:44:50.210883shield sshd\[12058\]: Failed password for root from 111.229.109.26 port 44116 ssh2
2020-09-04T17:44:52.209594shield sshd\[12077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.109.26  user=root
2020-09-05 13:17:33
82.223.19.45 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 12:56:52
157.56.9.9 attack
(sshd) Failed SSH login from 157.56.9.9 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  5 00:35:53 server5 sshd[27771]: Invalid user dg from 157.56.9.9
Sep  5 00:35:53 server5 sshd[27771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.56.9.9 
Sep  5 00:35:54 server5 sshd[27771]: Failed password for invalid user dg from 157.56.9.9 port 46062 ssh2
Sep  5 00:47:28 server5 sshd[1189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.56.9.9  user=root
Sep  5 00:47:31 server5 sshd[1189]: Failed password for root from 157.56.9.9 port 49812 ssh2
2020-09-05 12:53:06
115.211.231.39 attackbotsspam
Honeypot attack, port: 5555, PTR: PTR record not found
2020-09-05 12:48:57
186.156.109.244 attackbotsspam
Sep  4 18:52:23 mellenthin postfix/smtpd[30890]: NOQUEUE: reject: RCPT from pc-244-109-156-186.cm.vtr.net[186.156.109.244]: 554 5.7.1 Service unavailable; Client host [186.156.109.244] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.156.109.244; from= to= proto=ESMTP helo=
2020-09-05 13:07:30
104.206.128.6 attackspam
 TCP (SYN) 104.206.128.6:65457 -> port 3389, len 44
2020-09-05 13:05:06
108.62.121.180 attackbots
[2020-09-05 00:45:47] NOTICE[1194] chan_sip.c: Registration from '"601" ' failed for '108.62.121.180:5589' - Wrong password
[2020-09-05 00:45:47] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T00:45:47.520-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="601",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.121.180/5589",Challenge="16cb1201",ReceivedChallenge="16cb1201",ReceivedHash="33cb34bba6e066f207b30bd96ad8208d"
[2020-09-05 00:45:47] NOTICE[1194] chan_sip.c: Registration from '"601" ' failed for '108.62.121.180:5589' - Wrong password
[2020-09-05 00:45:47] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T00:45:47.541-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="601",SessionID="0x7f2ddc0f4e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.6
...
2020-09-05 12:46:54
61.2.192.16 attack
Port probing on unauthorized port 23
2020-09-05 13:30:41
58.239.110.47 attackspambots
5555/tcp
[2020-09-05]1pkt
2020-09-05 12:55:58
111.161.74.121 attackspam
Sep  4 18:49:17 vm1 sshd[10841]: Failed password for root from 111.161.74.121 port 58483 ssh2
...
2020-09-05 13:28:06
201.208.54.75 attackbots
Honeypot attack, port: 445, PTR: 201-208-54-75.genericrev.cantv.net.
2020-09-05 13:19:23
107.189.11.78 attack
Wordpress malicious attack:[sshd]
2020-09-05 13:31:40
190.175.7.89 attackbots
Sep  4 18:52:11 mellenthin postfix/smtpd[29582]: NOQUEUE: reject: RCPT from unknown[190.175.7.89]: 554 5.7.1 Service unavailable; Client host [190.175.7.89] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.175.7.89; from= to= proto=ESMTP helo=<190-175-7-89.speedy.com.ar>
2020-09-05 13:17:15
106.203.144.36 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 13:02:18

Recently Reported IPs

2.87.187.82 1.230.227.138 69.30.232.21 182.1.74.43
121.34.32.43 191.53.197.214 200.243.9.58 129.204.119.122
191.53.221.14 41.218.224.209 123.20.118.196 54.36.150.83
177.67.164.177 209.107.204.247 41.215.133.86 186.213.140.175
177.21.202.128 79.7.169.253 177.97.200.187 191.53.221.93