Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
128.199.104.150 attack
Invalid user leonidas from 128.199.104.150 port 5827
2020-07-01 02:23:11
128.199.104.150 attackbotsspam
Jun 28 15:13:13 server sshd[9972]: Failed password for root from 128.199.104.150 port 63106 ssh2
Jun 28 15:16:10 server sshd[12772]: Failed password for root from 128.199.104.150 port 37067 ssh2
Jun 28 15:19:14 server sshd[15676]: Failed password for invalid user deploy from 128.199.104.150 port 11136 ssh2
2020-06-29 00:53:53
128.199.104.242 attackspambots
Invalid user elsearch from 128.199.104.242 port 39562
2020-03-20 14:20:50
128.199.104.242 attackbots
Scanned 3 times in the last 24 hours on port 22
2020-03-20 09:03:54
128.199.104.242 attackspam
$f2bV_matches
2020-03-07 16:03:43
128.199.104.242 attackspam
Automatic report BANNED IP
2020-03-06 19:41:40
128.199.104.242 attackbotsspam
Feb 13 23:45:48 localhost sshd\[12138\]: Invalid user apache from 128.199.104.242 port 48962
Feb 13 23:45:48 localhost sshd\[12138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
Feb 13 23:45:50 localhost sshd\[12138\]: Failed password for invalid user apache from 128.199.104.242 port 48962 ssh2
...
2020-02-14 10:42:42
128.199.104.242 attackbotsspam
Feb 10 00:07:33 MK-Soft-VM3 sshd[15587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242 
Feb 10 00:07:36 MK-Soft-VM3 sshd[15587]: Failed password for invalid user ecl from 128.199.104.242 port 44532 ssh2
...
2020-02-10 09:32:43
128.199.104.242 attack
Unauthorized connection attempt detected from IP address 128.199.104.242 to port 2220 [J]
2020-01-31 05:14:52
128.199.104.242 attack
Jan 11 14:57:33 firewall sshd[31089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
Jan 11 14:57:33 firewall sshd[31089]: Invalid user !"#$%& from 128.199.104.242
Jan 11 14:57:35 firewall sshd[31089]: Failed password for invalid user !"#$%& from 128.199.104.242 port 44812 ssh2
...
2020-01-12 02:31:36
128.199.104.242 attack
2020-01-02T15:10:45.206960shield sshd\[19875\]: Invalid user test from 128.199.104.242 port 44330
2020-01-02T15:10:45.212436shield sshd\[19875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
2020-01-02T15:10:46.877098shield sshd\[19875\]: Failed password for invalid user test from 128.199.104.242 port 44330 ssh2
2020-01-02T15:14:15.601785shield sshd\[21138\]: Invalid user backup from 128.199.104.242 port 45310
2020-01-02T15:14:15.606143shield sshd\[21138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
2020-01-02 23:15:32
128.199.104.242 attackbots
Dec 27 16:35:17 localhost sshd\[19697\]: Invalid user iwanyk from 128.199.104.242 port 58976
Dec 27 16:35:17 localhost sshd\[19697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
Dec 27 16:35:19 localhost sshd\[19697\]: Failed password for invalid user iwanyk from 128.199.104.242 port 58976 ssh2
2019-12-28 02:06:40
128.199.104.242 attack
2019-12-27T06:28:01.970354abusebot-7.cloudsearch.cf sshd[16001]: Invalid user backup from 128.199.104.242 port 47374
2019-12-27T06:28:01.974176abusebot-7.cloudsearch.cf sshd[16001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
2019-12-27T06:28:01.970354abusebot-7.cloudsearch.cf sshd[16001]: Invalid user backup from 128.199.104.242 port 47374
2019-12-27T06:28:03.615975abusebot-7.cloudsearch.cf sshd[16001]: Failed password for invalid user backup from 128.199.104.242 port 47374 ssh2
2019-12-27T06:29:42.934333abusebot-7.cloudsearch.cf sshd[16004]: Invalid user hofland from 128.199.104.242 port 34226
2019-12-27T06:29:42.939748abusebot-7.cloudsearch.cf sshd[16004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
2019-12-27T06:29:42.934333abusebot-7.cloudsearch.cf sshd[16004]: Invalid user hofland from 128.199.104.242 port 34226
2019-12-27T06:29:44.782006abusebot-7.cloudsearch.c
...
2019-12-27 15:34:33
128.199.104.242 attackbotsspam
$f2bV_matches
2019-12-25 19:46:00
128.199.104.242 attackspambots
Dec 23 16:55:45 markkoudstaal sshd[22749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
Dec 23 16:55:48 markkoudstaal sshd[22749]: Failed password for invalid user msg from 128.199.104.242 port 42426 ssh2
Dec 23 17:01:28 markkoudstaal sshd[23319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.104.242
2019-12-24 04:44:42
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.199.104.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;128.199.104.13.			IN	A

;; AUTHORITY SECTION:
.			323	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:27:35 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 13.104.199.128.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.104.199.128.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
141.98.10.211 attack
no
2020-09-07 06:18:36
103.10.227.176 attackbots
DDOS
2020-09-07 06:04:11
119.81.113.242 attack
Unauthorised login to NAS
2020-09-07 05:45:41
222.186.30.57 attackbots
Sep  6 21:45:21 IngegnereFirenze sshd[23382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57  user=root
...
2020-09-07 05:52:27
222.186.30.76 attackspam
(sshd) Failed SSH login from 222.186.30.76 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  6 18:06:52 optimus sshd[30751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Sep  6 18:06:53 optimus sshd[30751]: Failed password for root from 222.186.30.76 port 45761 ssh2
Sep  6 18:06:56 optimus sshd[30751]: Failed password for root from 222.186.30.76 port 45761 ssh2
Sep  6 18:06:58 optimus sshd[30751]: Failed password for root from 222.186.30.76 port 45761 ssh2
Sep  6 18:07:01 optimus sshd[30776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
2020-09-07 06:07:55
181.174.128.60 attack
Brute force attempt
2020-09-07 05:54:52
178.63.88.48 attackspam
/wp-login.php
2020-09-07 06:05:56
45.227.255.206 attack
SSH Bruteforce Attempt on Honeypot
2020-09-07 06:20:17
89.248.168.107 attack
2020-09-06T15:54:22.709883linuxbox-skyline auth[120761]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=89.248.168.107
...
2020-09-07 06:03:54
49.128.174.248 attack
Honeypot attack, port: 445, PTR: 49.128.174-248.static-mumbai.wnet.net.in.
2020-09-07 06:08:36
92.46.124.194 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-07 05:56:52
109.206.14.149 attack
Unauthorised access (Sep  6) SRC=109.206.14.149 LEN=52 TTL=54 ID=22107 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-07 06:09:18
117.146.37.170 attack
22/tcp
[2020-09-06]1pkt
2020-09-07 06:13:10
45.142.120.215 attack
Sep  6 23:58:24 vmanager6029 postfix/smtpd\[22227\]: warning: unknown\[45.142.120.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  6 23:59:03 vmanager6029 postfix/smtpd\[22329\]: warning: unknown\[45.142.120.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-07 06:02:14
45.142.120.117 attack
2020-09-07 00:10:14 dovecot_login authenticator failed for \(User\) \[45.142.120.117\]: 535 Incorrect authentication data \(set_id=admin_password@no-server.de\)
2020-09-07 00:10:15 dovecot_login authenticator failed for \(User\) \[45.142.120.117\]: 535 Incorrect authentication data \(set_id=admin_password@no-server.de\)
2020-09-07 00:10:24 dovecot_login authenticator failed for \(User\) \[45.142.120.117\]: 535 Incorrect authentication data \(set_id=peripherals@no-server.de\)
2020-09-07 00:10:33 dovecot_login authenticator failed for \(User\) \[45.142.120.117\]: 535 Incorrect authentication data \(set_id=peripherals@no-server.de\)
2020-09-07 00:10:49 dovecot_login authenticator failed for \(User\) \[45.142.120.117\]: 535 Incorrect authentication data \(set_id=peripherals@no-server.de\)
2020-09-07 00:10:55 dovecot_login authenticator failed for \(User\) \[45.142.120.117\]: 535 Incorrect authentication data \(set_id=peripherals@no-server.de\)
2020-09-07 00:11:05 dovecot_login authenticato
...
2020-09-07 06:17:26

Recently Reported IPs

128.199.103.226 128.199.104.130 118.166.117.93 128.199.104.151
128.199.104.216 128.199.104.221 128.199.104.75 128.199.104.41
128.199.104.64 128.199.104.81 128.199.105.108 128.199.104.68
128.199.105.115 128.199.105.120 128.199.104.59 118.166.117.97
128.199.105.123 128.199.105.213 128.199.105.232 118.166.117.99