Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.56.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53356
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.20.56.166.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 07:22:52 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 166.56.20.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 166.56.20.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
211.147.216.19 attack
Jul 30 21:44:40 server1 sshd\[6728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19  user=root
Jul 30 21:44:42 server1 sshd\[6728\]: Failed password for root from 211.147.216.19 port 56478 ssh2
Jul 30 21:49:04 server1 sshd\[7727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19  user=root
Jul 30 21:49:06 server1 sshd\[7727\]: Failed password for root from 211.147.216.19 port 51258 ssh2
Jul 30 21:53:34 server1 sshd\[8666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.216.19  user=root
...
2020-07-31 14:55:35
158.69.246.141 attackspambots
[2020-07-31 02:09:26] NOTICE[1248][C-00001a7f] chan_sip.c: Call from '' (158.69.246.141:60306) to extension '00441519470489' rejected because extension not found in context 'public'.
[2020-07-31 02:09:26] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-31T02:09:26.481-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441519470489",SessionID="0x7f27200510e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.246.141/60306",ACLName="no_extension_match"
[2020-07-31 02:12:13] NOTICE[1248][C-00001a81] chan_sip.c: Call from '' (158.69.246.141:57368) to extension '011441519470489' rejected because extension not found in context 'public'.
[2020-07-31 02:12:13] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-31T02:12:13.145-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470489",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...
2020-07-31 14:37:40
192.35.168.31 attackspambots
 UDP 192.35.168.31:56976 -> port 47808, len 45
2020-07-31 14:44:47
185.176.27.34 attackbots
Port scan on 7 port(s): 22089 22695 22789 22790 23080 23081 23082
2020-07-31 14:24:42
116.236.251.214 attackbotsspam
Jul 31 03:05:11 firewall sshd[4026]: Failed password for root from 116.236.251.214 port 50141 ssh2
Jul 31 03:09:14 firewall sshd[4098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.251.214  user=root
Jul 31 03:09:16 firewall sshd[4098]: Failed password for root from 116.236.251.214 port 50964 ssh2
...
2020-07-31 14:26:22
138.197.180.102 attack
SSH Brute-Forcing (server1)
2020-07-31 14:58:38
94.177.229.87 attack
xmlrpc attack
2020-07-31 14:55:15
159.89.129.36 attackspambots
Port scan denied
2020-07-31 14:54:31
59.95.36.20 attack
Jul 30 23:50:09 h2022099 sshd[8312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.95.36.20  user=r.r
Jul 30 23:50:11 h2022099 sshd[8312]: Failed password for r.r from 59.95.36.20 port 39568 ssh2
Jul 30 23:50:11 h2022099 sshd[8312]: Received disconnect from 59.95.36.20: 11: Bye Bye [preauth]
Jul 30 23:53:59 h2022099 sshd[8516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.95.36.20  user=r.r
Jul 30 23:54:01 h2022099 sshd[8516]: Failed password for r.r from 59.95.36.20 port 39158 ssh2
Jul 30 23:54:01 h2022099 sshd[8516]: Received disconnect from 59.95.36.20: 11: Bye Bye [preauth]
Jul 30 23:57:53 h2022099 sshd[9086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.95.36.20  user=r.r
Jul 30 23:57:55 h2022099 sshd[9086]: Failed password for r.r from 59.95.36.20 port 38762 ssh2
Jul 30 23:57:56 h2022099 sshd[9086]: Received disconnect from 59.95........
-------------------------------
2020-07-31 14:38:01
175.149.50.11 attack
Automatic report - Port Scan Attack
2020-07-31 14:52:03
175.207.12.238 attackbots
Bruteforce detected by fail2ban
2020-07-31 14:59:13
190.151.94.2 attack
Dovecot Invalid User Login Attempt.
2020-07-31 14:34:55
113.160.223.233 attackspambots
20/7/30@23:53:41: FAIL: Alarm-Network address from=113.160.223.233
...
2020-07-31 14:52:19
198.12.225.100 attackbots
198.12.225.100 - - [31/Jul/2020:07:21:45 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1867 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.12.225.100 - - [31/Jul/2020:07:21:47 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.12.225.100 - - [31/Jul/2020:07:21:47 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-31 14:30:19
5.39.95.38 attack
SSH invalid-user multiple login attempts
2020-07-31 14:57:41

Recently Reported IPs

104.20.55.213 104.20.62.146 104.20.63.146 104.20.63.179
104.20.64.179 104.20.67.223 104.20.68.223 235.67.75.63
104.20.71.119 104.20.72.119 104.20.73.27 104.20.74.10
104.20.74.27 104.20.75.10 104.20.80.172 104.20.81.172
104.20.81.99 104.20.82.99 104.20.98.8 104.20.99.8