This IP address has been reported a total of
15
times from
12 distinct
sources.
104.131.189.180 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 85)
Source port: 61004
TTL: 241
Packet length: 44
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 85)
Source port: 61004
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 104.131.189.180) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8082)
Source port: 61003
TTL: 241
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8082)
Source port: 61003
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 104.131.189.180) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8090)
Source port: 61013
TTL: 241
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8090)
Source port: 61013
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 104.131.189.180) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
Anonymous
2026-02-25T17:26:11.137650 www.yerkanian.com sshd[1762063]: Failed password for root from 104.131.18 ...
show more2026-02-25T17:26:11.137650 www.yerkanian.com sshd[1762063]: Failed password for root from 104.131.189.180 port 33734 ssh2
2026-02-25T17:27:52.697688 www.yerkanian.com sshd[1762080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
2026-02-25T17:27:54.571293 www.yerkanian.com sshd[1762080]: Failed password for root from 104.131.189.180 port 54168 ssh2
2026-02-25T17:29:36.097974 www.yerkanian.com sshd[1762087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
2026-02-25T17:29:38.251917 www.yerkanian.com sshd[1762087]: Failed password for root from 104.131.189.180 port 41278 ssh2
2026-02-25T17:31:33.563693 www.yerkanian.com sshd[1762099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
2026-02-25T17:31:35.110806 www.yerkanian.com sshd[1762099]: Failed password for root from 104.131.189.180 por
...
show less
Brute-Force
SSH
Anonymous
2026-02-25T17:21:54.551468+01:00 mail sshd-session[613276]: Failed password for root from 104.131.18 ...
show more2026-02-25T17:21:54.551468+01:00 mail sshd-session[613276]: Failed password for root from 104.131.189.180 port 47250 ssh2
2026-02-25T17:24:22.266716+01:00 mail sshd-session[614775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
2026-02-25T17:24:24.341432+01:00 mail sshd-session[614775]: Failed password for root from 104.131.189.180 port 60928 ssh2
...
show less
Feb 25 11:17:11 v sshd\[23290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid ...
show moreFeb 25 11:17:11 v sshd\[23290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
Feb 25 11:17:13 v sshd\[23290\]: Failed password for root from 104.131.189.180 port 55098 ssh2
Feb 25 11:20:11 v sshd\[23391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
...
show less
2026-02-25T08:18:12.462066-08:00 server.vexstria.pro sshd[2166463]: Failed password for root from 10 ...
show more2026-02-25T08:18:12.462066-08:00 server.vexstria.pro sshd[2166463]: Failed password for root from 104.131.189.180 port 42524 ssh2
2026-02-25T08:18:42.314412-08:00 server.vexstria.pro sshd[2166865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.180 user=root
2026-02-25T08:18:44.684163-08:00 server.vexstria.pro sshd[2166865]: Failed password for root from 104.131.189.180 port 48532 ssh2
...
show less
Brute-Force
SSH
Port Scan
FTP Brute-Force
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩