Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.250.52.136 attackspambots
Invalid user dongjie from 104.250.52.136 port 46732
2020-07-29 07:23:56
104.250.52.130 attack
Invalid user wei from 104.250.52.130 port 35572
2020-05-16 15:01:46
104.250.52.130 attackspambots
2020-05-11T06:17:48.408183shield sshd\[24708\]: Invalid user daniel from 104.250.52.130 port 49052
2020-05-11T06:17:48.411840shield sshd\[24708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130
2020-05-11T06:17:50.500348shield sshd\[24708\]: Failed password for invalid user daniel from 104.250.52.130 port 49052 ssh2
2020-05-11T06:21:49.867223shield sshd\[25882\]: Invalid user timo from 104.250.52.130 port 37914
2020-05-11T06:21:49.870826shield sshd\[25882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130
2020-05-11 14:51:55
104.250.52.130 attack
2020-04-29T23:35:53.2249601495-001 sshd[7503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130
2020-04-29T23:35:53.2169301495-001 sshd[7503]: Invalid user temp1 from 104.250.52.130 port 65174
2020-04-29T23:35:55.2458011495-001 sshd[7503]: Failed password for invalid user temp1 from 104.250.52.130 port 65174 ssh2
2020-04-29T23:39:27.8276541495-001 sshd[7673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130  user=root
2020-04-29T23:39:29.2261031495-001 sshd[7673]: Failed password for root from 104.250.52.130 port 44334 ssh2
2020-04-29T23:42:58.3277251495-001 sshd[7872]: Invalid user simon from 104.250.52.130 port 23498
...
2020-04-30 12:04:01
104.250.52.209 attackbots
Wordpress malicious attack:[sshd]
2020-04-20 14:33:37
104.250.52.130 attackbotsspam
Apr  9 14:46:49 icinga sshd[28312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 
Apr  9 14:46:52 icinga sshd[28312]: Failed password for invalid user test from 104.250.52.130 port 55236 ssh2
Apr  9 14:59:54 icinga sshd[49972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 
...
2020-04-10 02:39:36
104.250.52.130 attackbotsspam
$f2bV_matches
2020-04-09 19:07:12
104.250.52.130 attackspambots
2020-04-08T03:41:36.574956abusebot.cloudsearch.cf sshd[6371]: Invalid user postgres from 104.250.52.130 port 3822
2020-04-08T03:41:36.581168abusebot.cloudsearch.cf sshd[6371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130
2020-04-08T03:41:36.574956abusebot.cloudsearch.cf sshd[6371]: Invalid user postgres from 104.250.52.130 port 3822
2020-04-08T03:41:38.287943abusebot.cloudsearch.cf sshd[6371]: Failed password for invalid user postgres from 104.250.52.130 port 3822 ssh2
2020-04-08T03:51:22.860817abusebot.cloudsearch.cf sshd[7143]: Invalid user team1 from 104.250.52.130 port 60378
2020-04-08T03:51:22.869354abusebot.cloudsearch.cf sshd[7143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130
2020-04-08T03:51:22.860817abusebot.cloudsearch.cf sshd[7143]: Invalid user team1 from 104.250.52.130 port 60378
2020-04-08T03:51:25.358583abusebot.cloudsearch.cf sshd[7143]: Failed password f
...
2020-04-08 19:41:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.250.52.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.250.52.189.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 22:52:19 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 189.52.250.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 189.52.250.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.13.231.171 attackbots
SSH bruteforce
2020-10-05 20:40:47
45.149.78.103 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-10-05 20:41:36
149.72.1.74 attackspam
2020-10-04 15:23:25.990872-0500  localhost smtpd[1892]: NOQUEUE: reject: RCPT from unknown[149.72.1.74]: 450 4.7.25 Client host rejected: cannot find your hostname, [149.72.1.74]; from= to= proto=ESMTP helo=
2020-10-05 20:06:38
112.85.42.184 attack
Oct  5 14:09:23 sshgateway sshd\[18156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.184  user=root
Oct  5 14:09:24 sshgateway sshd\[18156\]: Failed password for root from 112.85.42.184 port 54032 ssh2
Oct  5 14:09:36 sshgateway sshd\[18156\]: error: maximum authentication attempts exceeded for root from 112.85.42.184 port 54032 ssh2 \[preauth\]
2020-10-05 20:23:30
81.37.31.161 attackspam
Lines containing failures of 81.37.31.161
Oct  4 22:25:02 dns01 sshd[28623]: Did not receive identification string from 81.37.31.161 port 61620
Oct  4 22:25:05 dns01 sshd[28625]: Invalid user sniffer from 81.37.31.161 port 62012
Oct  4 22:25:05 dns01 sshd[28625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.37.31.161
Oct  4 22:25:07 dns01 sshd[28625]: Failed password for invalid user sniffer from 81.37.31.161 port 62012 ssh2
Oct  4 22:25:07 dns01 sshd[28625]: Connection closed by invalid user sniffer 81.37.31.161 port 62012 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.37.31.161
2020-10-05 20:12:21
111.231.202.118 attackspam
$f2bV_matches
2020-10-05 20:31:22
103.100.5.5 attack
[MK-Root1] Blocked by UFW
2020-10-05 20:45:29
193.37.255.114 attackbotsspam
Listed on    zen-spamhaus also abuseat.org   / proto=6  .  srcport=29011  .  dstport=8334  .     (1231)
2020-10-05 20:30:06
140.143.30.33 attack
Oct  5 12:57:00 db sshd[32283]: User root from 140.143.30.33 not allowed because none of user's groups are listed in AllowGroups
...
2020-10-05 20:18:49
148.70.195.242 attackbots
Oct  5 09:41:58 haigwepa sshd[11877]: Failed password for root from 148.70.195.242 port 46034 ssh2
...
2020-10-05 20:21:17
223.130.31.240 attackbotsspam
Port Scan: TCP/23
2020-10-05 20:43:20
210.245.52.91 attackbotsspam
445/tcp 445/tcp 445/tcp...
[2020-08-07/10-04]4pkt,1pt.(tcp)
2020-10-05 20:13:14
218.92.0.165 attack
detected by Fail2Ban
2020-10-05 20:05:10
103.45.150.7 attackspambots
"fail2ban match"
2020-10-05 20:27:24
222.186.31.83 attackspambots
Oct  5 09:04:21 shivevps sshd[31370]: Failed password for root from 222.186.31.83 port 29500 ssh2
Oct  5 09:04:23 shivevps sshd[31370]: Failed password for root from 222.186.31.83 port 29500 ssh2
Oct  5 09:04:26 shivevps sshd[31370]: Failed password for root from 222.186.31.83 port 29500 ssh2
...
2020-10-05 20:07:07

Recently Reported IPs

122.137.237.139 139.80.156.30 38.83.237.134 241.93.50.102
243.180.163.196 204.140.209.52 249.63.209.28 41.220.167.158
131.236.182.160 142.86.110.224 35.198.28.54 30.97.54.15
247.220.125.133 155.67.163.50 164.71.240.136 72.144.11.93
45.202.156.28 160.72.14.58 43.134.38.146 21.34.218.198