Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Houston

Region: Texas

Country: United States

Internet Service Provider: AT&T Corp.

Hostname: unknown

Organization: AT&T Services, Inc.

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
¯\_(ツ)_/¯
2019-06-21 16:33:02
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.2.54.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28907
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.2.54.16.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 21 16:32:54 CST 2019
;; MSG SIZE  rcvd: 115
Host info
16.54.2.104.in-addr.arpa domain name pointer 104-2-54-16.lightspeed.hstntx.sbcglobal.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
16.54.2.104.in-addr.arpa	name = 104-2-54-16.lightspeed.hstntx.sbcglobal.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
89.24.221.82 attack
SPF Fail sender not permitted to send mail for @tmcz.cz / Mail sent to address harvested from public web site
2019-11-05 18:52:57
27.254.194.99 attack
Nov  5 10:14:25 ns381471 sshd[21789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.194.99
Nov  5 10:14:27 ns381471 sshd[21789]: Failed password for invalid user nong from 27.254.194.99 port 56258 ssh2
2019-11-05 18:26:54
178.22.192.111 attackbotsspam
[portscan] Port scan
2019-11-05 18:20:38
178.210.70.55 attack
178.210.70.55 - - [05/Nov/2019:07:22:12 +0100] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.210.70.55 - - [05/Nov/2019:07:22:12 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "http://thinklarge.fr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.210.70.55 - - [05/Nov/2019:07:22:13 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.210.70.55 - - [05/Nov/2019:07:22:13 +0100] "POST /wp-login.php HTTP/1.1" 200 1634 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.210.70.55 - - [05/Nov/2019:07:25:10 +0100] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.210.70.55 - - [05/Nov/2019:07:25:10 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "http://thinklarge.fr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux
2019-11-05 18:29:14
200.104.233.144 attackbots
TCP Port Scanning
2019-11-05 18:54:45
46.101.1.198 attack
SSH Bruteforce
2019-11-05 18:45:12
139.162.122.110 attackspambots
2019-11-05T06:24:54.658664abusebot-4.cloudsearch.cf sshd\[26892\]: Invalid user  from 139.162.122.110 port 58550
2019-11-05 18:44:16
14.63.174.149 attackspam
Nov  5 06:48:58 firewall sshd[21505]: Failed password for invalid user felix from 14.63.174.149 port 52756 ssh2
Nov  5 06:53:07 firewall sshd[21575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.174.149  user=root
Nov  5 06:53:09 firewall sshd[21575]: Failed password for root from 14.63.174.149 port 43287 ssh2
...
2019-11-05 18:32:25
186.7.21.21 attack
TCP Port Scanning
2019-11-05 18:21:43
177.102.238.198 attackspambots
Automatic report - Banned IP Access
2019-11-05 18:23:31
176.31.191.61 attackbots
Nov  4 23:19:47 hanapaa sshd\[30301\]: Invalid user ChinaShc from 176.31.191.61
Nov  4 23:19:47 hanapaa sshd\[30301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-176-31-191.eu
Nov  4 23:19:50 hanapaa sshd\[30301\]: Failed password for invalid user ChinaShc from 176.31.191.61 port 54100 ssh2
Nov  4 23:23:42 hanapaa sshd\[30567\]: Invalid user unused from 176.31.191.61
Nov  4 23:23:42 hanapaa sshd\[30567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-176-31-191.eu
2019-11-05 18:31:20
207.154.232.160 attack
Nov  5 10:03:40 [host] sshd[3815]: Invalid user user from 207.154.232.160
Nov  5 10:03:40 [host] sshd[3815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.232.160
Nov  5 10:03:41 [host] sshd[3815]: Failed password for invalid user user from 207.154.232.160 port 48182 ssh2
2019-11-05 18:22:15
159.253.32.120 attackspambots
159.253.32.120 - - \[05/Nov/2019:06:24:41 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
159.253.32.120 - - \[05/Nov/2019:06:24:43 +0000\] "POST /wp-login.php HTTP/1.1" 200 4219 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-11-05 18:51:56
213.209.114.26 attackspambots
k+ssh-bruteforce
2019-11-05 18:44:36
159.192.217.128 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-11-05 18:53:51

Recently Reported IPs

123.188.11.152 241.234.90.211 124.206.29.73 182.69.22.175
18.51.0.42 42.40.205.197 103.205.247.219 212.131.173.171
51.120.119.170 181.244.127.137 116.70.245.54 17.1.179.180
198.213.255.11 122.235.141.204 191.158.119.252 218.82.26.80
96.33.71.26 81.250.88.106 62.234.182.31 191.24.204.34