This IP address has been reported a total of
69
times from
49 distinct
sources.
104.131.127.61 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf
SSH
Brute-Force
Anonymous
2026-06-04T17:58:56.499671-04:00 seraldcarolina sshd[958230]: Invalid user jing from 104.131.127.61 ...
show more2026-06-04T17:58:56.499671-04:00 seraldcarolina sshd[958230]: Invalid user jing from 104.131.127.61 port 33082
2026-06-04T18:02:19.059055-04:00 seraldcarolina sshd[958317]: Invalid user tsbot from 104.131.127.61 port 33872
2026-06-04T18:05:51.163978-04:00 seraldcarolina sshd[958326]: Invalid user frontend from 104.131.127.61 port 57074
...
show less
2026-06-04T21:33:34.780772+00:00 MailServer-Slave sshd[848222]: Failed password for root from 104.13 ...
show more2026-06-04T21:33:34.780772+00:00 MailServer-Slave sshd[848222]: Failed password for root from 104.131.127.61 port 53596 ssh2
2026-06-04T21:44:28.711973+00:00 MailServer-Slave sshd[848261]: Invalid user phpuser from 104.131.127.61 port 40378
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T23:44:23.087477+02:00 vm986549.cloud.nuxt.network sshd-session[48372]: Invalid user phpus ...
show more2026-06-04T23:44:23.087477+02:00 vm986549.cloud.nuxt.network sshd-session[48372]: Invalid user phpuser from 104.131.127.61 port 54776
2026-06-04T23:44:23.092843+02:00 vm986549.cloud.nuxt.network sshd-session[48372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.127.61
2026-06-04T23:44:24.625751+02:00 vm986549.cloud.nuxt.network sshd-session[48372]: Failed password for invalid user phpuser from 104.131.127.61 port 54776 ssh2
...
show less
2026-06-04T22:07:41.950242+01:00 akvorado.trivox.sh sshd-session[3127768]: Failed password for inval ...
show more2026-06-04T22:07:41.950242+01:00 akvorado.trivox.sh sshd-session[3127768]: Failed password for invalid user zhangyue from 104.131.127.61 port 36750 ssh2
2026-06-04T22:07:43.180074+01:00 akvorado.trivox.sh sshd-session[3127768]: Disconnected from invalid user zhangyue 104.131.127.61 port 36750 [preauth]
2026-06-04T22:11:05.351883+01:00 akvorado.trivox.sh sshd-session[3132557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.127.61 user=root
2026-06-04T22:11:07.314976+01:00 akvorado.trivox.sh sshd-session[3132557]: Failed password for root from 104.131.127.61 port 39142 ssh2
2026-06-04T22:11:08.152232+01:00 akvorado.trivox.sh sshd-session[3132557]: Disconnected from authenticating user root 104.131.127.61 port 39142 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T20:57:31.264690+00:00 ubuntu sshd[3307330]: pam_unix(sshd:auth): authentication failure; ...
show more2026-06-04T20:57:31.264690+00:00 ubuntu sshd[3307330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.127.61 user=root
2026-06-04T20:57:33.536953+00:00 ubuntu sshd[3307330]: Failed password for root from 104.131.127.61 port 41520 ssh2
2026-06-04T20:57:35.256496+00:00 ubuntu sshd[3307330]: Disconnected from authenticating user root 104.131.127.61 port 41520 [preauth]
2026-06-04T20:57:35.256496+00:00 ubuntu sshd[3307330]: Disconnected from authenticating user root 104.131.127.61 port 41520 [preauth]
2026-06-04T21:00:53.049130+00:00 ubuntu sshd[3307538]: Invalid user botuser from 104.131.127.61 port 38042
...
show less
2026-06-04T20:56:26.031617+00:00 24fire sshd-session[1798948]: Failed password for root from 104.131 ...
show more2026-06-04T20:56:26.031617+00:00 24fire sshd-session[1798948]: Failed password for root from 104.131.127.61 port 37086 ssh2
2026-06-04T20:59:34.346358+00:00 24fire sshd-session[1801048]: Invalid user botuser from 104.131.127.61 port 38256
...
show less
2026-06-04T20:15:30.807833+00:00 24fire sshd-session[1772567]: pam_unix(sshd:auth): authentication f ...
show more2026-06-04T20:15:30.807833+00:00 24fire sshd-session[1772567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.127.61
2026-06-04T20:15:32.437905+00:00 24fire sshd-session[1772567]: Failed password for invalid user useradmin from 104.131.127.61 port 51454 ssh2
...
show less
2026-06-04T20:56:24.207170+01:00 akvorado.trivox.sh sshd-session[3033978]: Disconnected from authent ...
show more2026-06-04T20:56:24.207170+01:00 akvorado.trivox.sh sshd-session[3033978]: Disconnected from authenticating user root 104.131.127.61 port 49990 [preauth]
2026-06-04T21:03:18.807566+01:00 akvorado.trivox.sh sshd-session[3043183]: Invalid user tuser from 104.131.127.61 port 60492
2026-06-04T21:03:18.820097+01:00 akvorado.trivox.sh sshd-session[3043183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.127.61
2026-06-04T21:03:20.607886+01:00 akvorado.trivox.sh sshd-session[3043183]: Failed password for invalid user tuser from 104.131.127.61 port 60492 ssh2
2026-06-04T21:03:21.941823+01:00 akvorado.trivox.sh sshd-session[3043183]: Disconnected from invalid user tuser 104.131.127.61 port 60492 [preauth]
...
show less
2026-06-04T19:58:39.877525+00:00 24fire sshd-session[1761805]: pam_unix(sshd:auth): authentication f ...
show more2026-06-04T19:58:39.877525+00:00 24fire sshd-session[1761805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.127.61
2026-06-04T19:58:41.880977+00:00 24fire sshd-session[1761805]: Failed password for invalid user user from 104.131.127.61 port 55442 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 69 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩