Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Houston

Region: Texas

Country: United States

Internet Service Provider: AT&T Corp.

Hostname: unknown

Organization: AT&T Services, Inc.

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
¯\_(ツ)_/¯
2019-06-21 16:33:02
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.2.54.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28907
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.2.54.16.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 21 16:32:54 CST 2019
;; MSG SIZE  rcvd: 115
Host info
16.54.2.104.in-addr.arpa domain name pointer 104-2-54-16.lightspeed.hstntx.sbcglobal.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
16.54.2.104.in-addr.arpa	name = 104-2-54-16.lightspeed.hstntx.sbcglobal.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
170.130.187.26 attackbots
port scan and connect, tcp 3306 (mysql)
2019-07-06 03:52:31
106.13.72.36 attackspam
Jul  5 20:08:11 lnxded64 sshd[29097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.36
2019-07-06 03:59:38
89.110.48.143 attackbots
Brute force attempt
2019-07-06 04:04:53
187.72.49.8 attackbotsspam
Autoban   187.72.49.8 AUTH/CONNECT
2019-07-06 04:01:20
94.232.32.91 attackbotsspam
NAME : mikemi-net CIDR : 94.232.32.0/21 DDoS attack Poland - block certain countries :) IP: 94.232.32.91  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-07-06 04:27:47
139.199.163.136 attackspambots
Jul  5 21:09:19 mail sshd\[31389\]: Invalid user web1 from 139.199.163.136 port 55820
Jul  5 21:09:19 mail sshd\[31389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.163.136
Jul  5 21:09:21 mail sshd\[31389\]: Failed password for invalid user web1 from 139.199.163.136 port 55820 ssh2
Jul  5 21:11:53 mail sshd\[31712\]: Invalid user riak from 139.199.163.136 port 51270
Jul  5 21:11:53 mail sshd\[31712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.163.136
2019-07-06 04:34:11
128.199.197.53 attackbots
Jul  5 21:53:55 mail sshd\[5362\]: Invalid user keystone from 128.199.197.53 port 36469
Jul  5 21:53:55 mail sshd\[5362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.53
Jul  5 21:53:57 mail sshd\[5362\]: Failed password for invalid user keystone from 128.199.197.53 port 36469 ssh2
Jul  5 21:56:31 mail sshd\[5745\]: Invalid user deploy from 128.199.197.53 port 49007
Jul  5 21:56:31 mail sshd\[5745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.53
2019-07-06 03:57:44
85.11.48.222 attackspam
Honeypot attack, port: 23, PTR: ip222.selangerhus1.kund.riksnet.se.
2019-07-06 04:14:33
85.172.11.54 attackspam
Port 3389 Scan
2019-07-06 04:25:34
193.112.244.110 attackspambots
Failed password for invalid user steamcmd from 193.112.244.110 port 41346 ssh2
Invalid user claire from 193.112.244.110 port 34972
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.244.110
Failed password for invalid user claire from 193.112.244.110 port 34972 ssh2
Invalid user andra from 193.112.244.110 port 56828
2019-07-06 04:21:53
103.196.52.136 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 16:17:35,978 INFO [shellcode_manager] (103.196.52.136) no match, writing hexdump (43c806a8cf977606b387b52219be2bed :2235109) - MS17010 (EternalBlue)
2019-07-06 03:49:16
165.231.133.72 attackspam
Automatic report - Web App Attack
2019-07-06 03:51:47
125.212.253.118 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-07-06 04:09:35
88.88.193.230 attackbotsspam
2019-07-05T19:45:59.014982abusebot-5.cloudsearch.cf sshd\[7149\]: Invalid user alfreda from 88.88.193.230 port 49083
2019-07-06 04:27:15
113.141.64.69 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-07-06 04:03:45

Recently Reported IPs

123.188.11.152 241.234.90.211 124.206.29.73 182.69.22.175
18.51.0.42 42.40.205.197 103.205.247.219 212.131.173.171
51.120.119.170 181.244.127.137 116.70.245.54 17.1.179.180
198.213.255.11 122.235.141.204 191.158.119.252 218.82.26.80
96.33.71.26 81.250.88.106 62.234.182.31 191.24.204.34