Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Strasmore Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Aug 31 14:24:50 vps1 sshd[22780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.80 
Aug 31 14:24:52 vps1 sshd[22780]: Failed password for invalid user pd from 104.225.219.80 port 40042 ssh2
Aug 31 14:26:21 vps1 sshd[22787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.80 
Aug 31 14:26:23 vps1 sshd[22787]: Failed password for invalid user justus from 104.225.219.80 port 35540 ssh2
Aug 31 14:27:49 vps1 sshd[22790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.80 
Aug 31 14:27:52 vps1 sshd[22790]: Failed password for invalid user www from 104.225.219.80 port 59264 ssh2
Aug 31 14:29:19 vps1 sshd[22792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.80 
...
2020-09-01 04:12:23
attackspambots
Lines containing failures of 104.225.219.80
Aug 25 22:00:25 g1 sshd[32296]: Invalid user jg from 104.225.219.80 port 35036
Aug 25 22:00:25 g1 sshd[32296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.80 
Aug 25 22:00:27 g1 sshd[32296]: Failed password for invalid user jg from 104.225.219.80 port 35036 ssh2
Aug 25 22:00:27 g1 sshd[32296]: Received disconnect from 104.225.219.80 port 35036:11: Bye Bye [preauth]
Aug 25 22:00:27 g1 sshd[32296]: Disconnected from invalid user jg 104.225.219.80 port 35036 [preauth]
Aug 25 22:04:17 g1 sshd[926]: Invalid user pro1 from 104.225.219.80 port 47288
Aug 25 22:04:17 g1 sshd[926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.80 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.225.219.80
2020-08-26 05:40:11
Comments on same subnet:
IP Type Details Datetime
104.225.219.138 attackspambots
ssh brute force
2020-04-27 16:38:04
104.225.219.138 attack
SASL PLAIN auth failed: ruser=...
2020-04-27 07:00:11
104.225.219.138 attackspambots
failed root login
2020-04-24 17:02:36
104.225.219.138 attackbots
Apr  7 05:43:27 ovpn sshd\[15893\]: Invalid user student3 from 104.225.219.138
Apr  7 05:43:27 ovpn sshd\[15893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.138
Apr  7 05:43:29 ovpn sshd\[15893\]: Failed password for invalid user student3 from 104.225.219.138 port 49320 ssh2
Apr  7 05:53:03 ovpn sshd\[18215\]: Invalid user hostmaster from 104.225.219.138
Apr  7 05:53:03 ovpn sshd\[18215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.225.219.138
2020-04-07 14:11:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.225.219.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11436
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.225.219.80.			IN	A

;; AUTHORITY SECTION:
.			428	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082501 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 26 05:40:07 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 80.219.225.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.219.225.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.94.163.43 attack
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:21:13
36.32.3.225 attack
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:32:44
190.85.145.162 attack
Nov 18 15:47:48 serwer sshd\[25403\]: Invalid user mundt from 190.85.145.162 port 37072
Nov 18 15:47:48 serwer sshd\[25403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.145.162
Nov 18 15:47:50 serwer sshd\[25403\]: Failed password for invalid user mundt from 190.85.145.162 port 37072 ssh2
...
2019-11-19 04:23:38
182.242.105.121 attackbots
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:17:14
223.198.169.239 attackspambots
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:20:07
42.236.10.117 attackspambots
The IP has triggered Cloudflare WAF. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:31:13
49.88.112.114 attackbots
Nov 18 21:00:11 root sshd[21866]: Failed password for root from 49.88.112.114 port 22646 ssh2
Nov 18 21:00:14 root sshd[21866]: Failed password for root from 49.88.112.114 port 22646 ssh2
Nov 18 21:00:16 root sshd[21866]: Failed password for root from 49.88.112.114 port 22646 ssh2
...
2019-11-19 04:05:54
118.24.81.234 attack
ssh failed login
2019-11-19 04:18:42
220.181.124.21 attackbots
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:35:16
111.231.76.29 attackbots
Nov 18 20:54:02 lnxded63 sshd[11042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.76.29
Nov 18 20:54:02 lnxded63 sshd[11042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.76.29
2019-11-19 03:58:47
111.202.103.148 attackbotsspam
The IP has triggered Cloudflare WAF. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:28:54
27.211.57.47 attackbotsspam
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:34:15
2408:8648:1300:40:2106:c6c3:4d82:9763 attackspambots
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:34:00
221.13.12.111 attackspambots
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:21:46
175.211.116.230 attack
SSH Brute Force, server-1 sshd[21692]: Failed password for invalid user jiang from 175.211.116.230 port 34082 ssh2
2019-11-19 04:06:55

Recently Reported IPs

111.98.157.159 140.33.12.244 78.227.125.243 186.216.67.206
27.83.56.219 147.134.219.168 154.207.72.240 236.32.94.51
153.103.200.201 255.206.26.90 130.211.65.212 21.109.99.105
113.185.58.206 216.26.106.90 165.232.58.234 110.151.126.180
24.242.62.80 77.16.136.248 187.20.142.243 68.152.96.100