Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Silkeborg

Region: Central Jutland

Country: Denmark

Internet Service Provider: unknown

Hostname: unknown

Organization: Tele Danmark

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.104.1.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25744
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.104.1.54.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 21 03:46:01 CST 2019
;; MSG SIZE  rcvd: 114
Host info
54.1.104.2.in-addr.arpa domain name pointer 2-104-1-54-cable.dk.customer.tdc.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
54.1.104.2.in-addr.arpa	name = 2-104-1-54-cable.dk.customer.tdc.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
113.182.1.131 attack
Lines containing failures of 113.182.1.131
Oct 17 17:24:03 server-name sshd[4469]: User r.r from 113.182.1.131 not allowed because not listed in AllowUsers
Oct 17 17:24:03 server-name sshd[4469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.182.1.131  user=r.r
Oct 17 17:24:05 server-name sshd[4469]: Failed password for invalid user r.r from 113.182.1.131 port 50550 ssh2
Oct 17 17:24:07 server-name sshd[4469]: Connection closed by invalid user r.r 113.182.1.131 port 50550 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.182.1.131
2019-11-13 15:40:47
139.59.171.46 attackspambots
xmlrpc attack
2019-11-13 15:50:10
116.118.2.171 attackspambots
Lines containing failures of 116.118.2.171
Oct 17 17:33:01 server-name sshd[5488]: Invalid user admin from 116.118.2.171 port 33175
Oct 17 17:33:02 server-name sshd[5488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.118.2.171 
Oct 17 17:33:03 server-name sshd[5488]: Failed password for invalid user admin from 116.118.2.171 port 33175 ssh2
Oct 17 17:33:04 server-name sshd[5488]: Connection closed by invalid user admin 116.118.2.171 port 33175 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=116.118.2.171
2019-11-13 16:00:05
45.40.203.242 attackspambots
$f2bV_matches
2019-11-13 16:11:33
45.57.236.202 attackbots
(From vickyrowe543@gmail.com) Hi!

I was checking on your website, and it seems you might have to update it to keep up with the current trends. People nowadays are more comfortable browsing the internet on their phone or tablet since it's more convenient. There were some issues when I was viewing it in mobile platforms, I can fix that for you. 

I already like its design and overall user-interface, but I believe that your website can get even better so that your potential clients can be more engaged to do business with you, thus making your website more profitable. I'm all about flexibility and I'm sure that we can work out something to fit your needs. 

My rates are cheap since I'm committed to helping small businesses. I'll answer all the questions you have for me during a free consultation over the phone. I'd also like to know your ideas for the website, so please reply with the best time for me to call and your preferred contact details. I look forward to hearing back from you. 

Best Regards,
Vick
2019-11-13 15:36:59
103.235.236.224 attack
SSH Bruteforce
2019-11-13 16:01:12
195.9.9.66 attack
Telnet Server BruteForce Attack
2019-11-13 15:53:55
36.224.254.189 attackbotsspam
Telnet Server BruteForce Attack
2019-11-13 15:43:45
182.16.179.70 attackspam
2019-11-13T08:31:21.7214641240 sshd\[10182\]: Invalid user zabbix from 182.16.179.70 port 46912
2019-11-13T08:31:21.7243541240 sshd\[10182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.179.70
2019-11-13T08:31:23.5708391240 sshd\[10182\]: Failed password for invalid user zabbix from 182.16.179.70 port 46912 ssh2
...
2019-11-13 15:37:47
97.90.49.141 attackbots
Mail sent to address hacked/leaked from Last.fm
2019-11-13 16:07:41
37.139.4.138 attackspambots
Nov 13 08:39:17 dedicated sshd[22927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.4.138  user=root
Nov 13 08:39:18 dedicated sshd[22927]: Failed password for root from 37.139.4.138 port 38934 ssh2
2019-11-13 15:45:14
41.234.115.174 attackbotsspam
Lines containing failures of 41.234.115.174
Sep 20 07:46:12 server-name sshd[349]: Invalid user admin from 41.234.115.174 port 33684
Sep 20 07:46:12 server-name sshd[349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.115.174 
Sep 20 07:46:14 server-name sshd[349]: Failed password for invalid user admin from 41.234.115.174 port 33684 ssh2
Sep 20 07:46:16 server-name sshd[349]: Connection closed by invalid user admin 41.234.115.174 port 33684 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.234.115.174
2019-11-13 15:53:03
76.248.248.52 attackbotsspam
76.248.248.52 was recorded 5 times by 1 hosts attempting to connect to the following ports: 3389. Incident counter (4h, 24h, all-time): 5, 20, 320
2019-11-13 16:06:39
207.180.198.241 attack
ft-1848-basketball.de 207.180.198.241 \[13/Nov/2019:07:28:43 +0100\] "POST /wp-login.php HTTP/1.1" 200 2164 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
ft-1848-basketball.de 207.180.198.241 \[13/Nov/2019:07:28:44 +0100\] "POST /wp-login.php HTTP/1.1" 200 2136 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-13 15:47:24
63.88.23.155 attackbotsspam
63.88.23.155 was recorded 6 times by 4 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 6, 21, 45
2019-11-13 15:34:02

Recently Reported IPs

165.115.96.164 39.75.178.165 194.200.220.86 15.202.147.137
130.171.227.167 20.158.197.26 36.80.243.72 117.193.101.158
229.193.76.194 77.140.35.184 255.42.96.64 162.252.213.231
140.160.82.89 175.54.199.14 49.105.160.8 180.247.200.143
98.95.3.131 16.195.20.39 19.205.139.77 178.130.10.236