Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.131.113 attackbotsspam
Oct  1 01:00:19 haigwepa sshd[3976]: Failed password for root from 104.248.131.113 port 19932 ssh2
...
2020-10-01 08:13:15
104.248.131.113 attackspam
2020-09-30T16:32:13.434091shield sshd\[5022\]: Invalid user cgi from 104.248.131.113 port 52048
2020-09-30T16:32:13.445193shield sshd\[5022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.131.113
2020-09-30T16:32:15.014608shield sshd\[5022\]: Failed password for invalid user cgi from 104.248.131.113 port 52048 ssh2
2020-09-30T16:35:27.039161shield sshd\[5367\]: Invalid user alex from 104.248.131.113 port 41728
2020-09-30T16:35:27.050789shield sshd\[5367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.131.113
2020-10-01 00:45:16
104.248.131.113 attack
$f2bV_matches
2020-09-30 17:01:22
104.248.131.62 spam
macam mana tu
2020-06-16 15:08:16
104.248.131.234 attackspam
Apr 12 05:49:51 debian-2gb-nbg1-2 kernel: \[8922391.504866\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.131.234 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=43158 PROTO=TCP SPT=46363 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-12 18:24:20
104.248.131.234 attackspambots
Port probing on unauthorized port 5038
2020-04-02 06:29:28
104.248.131.60 attackbots
" "
2020-01-09 19:49:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.131.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57183
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.131.100.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025040600 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 06 17:30:44 CST 2025
;; MSG SIZE  rcvd: 108
Host info
Host 100.131.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 100.131.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
117.215.133.36 attack
Unauthorized connection attempt detected from IP address 117.215.133.36 to port 445
2020-02-20 22:53:49
103.233.122.250 attackbotsspam
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-02-20 23:08:32
95.174.102.70 attackspam
2020-02-20T08:15:40.2166531495-001 sshd[35401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.174.102.70
2020-02-20T08:15:40.2086781495-001 sshd[35401]: Invalid user robert from 95.174.102.70 port 37676
2020-02-20T08:15:42.1552951495-001 sshd[35401]: Failed password for invalid user robert from 95.174.102.70 port 37676 ssh2
2020-02-20T09:16:50.4628581495-001 sshd[38675]: Invalid user nagios from 95.174.102.70 port 45428
2020-02-20T09:16:50.4704531495-001 sshd[38675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.174.102.70
2020-02-20T09:16:50.4628581495-001 sshd[38675]: Invalid user nagios from 95.174.102.70 port 45428
2020-02-20T09:16:53.2361331495-001 sshd[38675]: Failed password for invalid user nagios from 95.174.102.70 port 45428 ssh2
2020-02-20T09:19:26.2007001495-001 sshd[38831]: Invalid user wding from 95.174.102.70 port 37178
2020-02-20T09:19:26.2083181495-001 sshd[38831]: pam_unix(sshd:a
...
2020-02-20 23:03:57
137.220.138.252 attack
2020-02-18T19:37:59.7996491495-001 sshd[50103]: Invalid user oracle from 137.220.138.252 port 37938
2020-02-18T19:37:59.8028561495-001 sshd[50103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.220.138.252
2020-02-18T19:37:59.7996491495-001 sshd[50103]: Invalid user oracle from 137.220.138.252 port 37938
2020-02-18T19:38:01.1913971495-001 sshd[50103]: Failed password for invalid user oracle from 137.220.138.252 port 37938 ssh2
2020-02-18T19:42:19.7748531495-001 sshd[50331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.220.138.252  user=r.r
2020-02-18T19:42:21.8557071495-001 sshd[50331]: Failed password for r.r from 137.220.138.252 port 59974 ssh2
2020-02-18T19:43:34.1395771495-001 sshd[50456]: Invalid user nx from 137.220.138.252 port 38510
2020-02-18T19:43:34.1431551495-001 sshd[50456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.2........
------------------------------
2020-02-20 22:47:45
117.221.69.3 attackbots
1582205371 - 02/20/2020 14:29:31 Host: 117.221.69.3/117.221.69.3 Port: 445 TCP Blocked
2020-02-20 22:54:51
222.186.30.248 attack
Feb 20 15:38:08 dcd-gentoo sshd[23020]: User root from 222.186.30.248 not allowed because none of user's groups are listed in AllowGroups
Feb 20 15:38:13 dcd-gentoo sshd[23020]: error: PAM: Authentication failure for illegal user root from 222.186.30.248
Feb 20 15:38:08 dcd-gentoo sshd[23020]: User root from 222.186.30.248 not allowed because none of user's groups are listed in AllowGroups
Feb 20 15:38:13 dcd-gentoo sshd[23020]: error: PAM: Authentication failure for illegal user root from 222.186.30.248
Feb 20 15:38:08 dcd-gentoo sshd[23020]: User root from 222.186.30.248 not allowed because none of user's groups are listed in AllowGroups
Feb 20 15:38:13 dcd-gentoo sshd[23020]: error: PAM: Authentication failure for illegal user root from 222.186.30.248
Feb 20 15:38:13 dcd-gentoo sshd[23020]: Failed keyboard-interactive/pam for invalid user root from 222.186.30.248 port 31097 ssh2
...
2020-02-20 22:46:57
87.117.55.149 attack
Unauthorized connection attempt detected from IP address 87.117.55.149 to port 445
2020-02-20 23:02:11
178.128.48.87 attack
Wordpress attack
2020-02-20 23:26:26
77.72.124.246 attackbotsspam
suspicious action Thu, 20 Feb 2020 10:29:05 -0300
2020-02-20 23:15:23
157.245.58.92 attack
Feb 20 15:15:36 markkoudstaal sshd[16642]: Failed password for gnats from 157.245.58.92 port 52196 ssh2
Feb 20 15:16:54 markkoudstaal sshd[16870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.58.92
Feb 20 15:16:56 markkoudstaal sshd[16870]: Failed password for invalid user gitlab-prometheus from 157.245.58.92 port 33148 ssh2
2020-02-20 22:47:17
116.206.40.57 attack
1582205366 - 02/20/2020 14:29:26 Host: 116.206.40.57/116.206.40.57 Port: 445 TCP Blocked
2020-02-20 23:00:42
46.101.19.133 attack
Repeated brute force against a port
2020-02-20 23:28:33
220.182.3.39 attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-02-20 23:22:27
3.135.208.239 attackspam
Feb 20 13:27:32 web8 sshd\[18987\]: Invalid user michael from 3.135.208.239
Feb 20 13:27:32 web8 sshd\[18987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.135.208.239
Feb 20 13:27:34 web8 sshd\[18987\]: Failed password for invalid user michael from 3.135.208.239 port 45296 ssh2
Feb 20 13:28:56 web8 sshd\[19671\]: Invalid user cpaneleximscanner from 3.135.208.239
Feb 20 13:28:56 web8 sshd\[19671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.135.208.239
2020-02-20 23:22:15
167.89.100.227 attackbots
Feb 20 14:29:07 grey postfix/smtpd\[15189\]: NOQUEUE: reject: RCPT from o1.31pqt.s2shared.sendgrid.net\[167.89.100.227\]: 554 5.7.1 Service unavailable\; Client host \[167.89.100.227\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?167.89.100.227\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-20 23:13:15

Recently Reported IPs

104.248.42.13 64.226.105.95 64.225.100.118 207.154.224.21
138.113.245.78 194.165.16.161 3.97.21.193 217.154.85.4
225.122.225.151 61.113.79.36 13.68.129.190 10.160.106.190
91.238.181.95 48.216.248.210 43.155.129.131 192.168.119.30
219.200.66.17 9.7.223.201 26.190.49.178 14.212.107.43