This IP address has been reported a total of
129
times from
66 distinct
sources.
31.59.104.204 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-05-07T21:56:39.203905+02:00 amqp-host01.amqp.srvfarm.net sshd[148954]: Connection closed by aut ...
show more2026-05-07T21:56:39.203905+02:00 amqp-host01.amqp.srvfarm.net sshd[148954]: Connection closed by authenticating user admin 31.59.104.204 port 45182 [preauth]
2026-05-07T21:57:18.308129+02:00 amqp-host01.amqp.srvfarm.net sshd[148972]: Invalid user orangepi from 31.59.104.204 port 48256
2026-05-07T21:57:19.197616+02:00 amqp-host01.amqp.srvfarm.net sshd[148972]: Connection closed by invalid user orangepi 31.59.104.204 port 48256 [preauth]
2026-05-07T21:57:52.226340+02:00 amqp-host01.amqp.srvfarm.net sshd[149002]: Connection closed by authenticating user root 31.59.104.204 port 52626 [preauth]
2026-05-07T21:58:30.360111+02:00 amqp-host01.amqp.srvfarm.net sshd[149030]: Connection closed by authenticating user root 31.59.104.204 port 44096 [preauth]
show less
May 7 21:30:41 undeadly sshd-session[78546]: Invalid user admin from 31.59.104.204 port 49824
May ...
show moreMay 7 21:30:41 undeadly sshd-session[78546]: Invalid user admin from 31.59.104.204 port 49824
May 7 21:30:41 undeadly sshd-session[78546]: Failed password for invalid user admin from 31.59.104.204 port 49824 ssh2
May 7 21:31:17 undeadly sshd-session[38258]: Invalid user orangepi from 31.59.104.204 port 60086
May 7 21:31:17 undeadly sshd-session[38258]: Failed password for invalid user orangepi from 31.59.104.204 port 60086 ssh2
May 7 21:31:49 undeadly sshd-session[3813]: Failed password for root from 31.59.104.204 port 60634 ssh2
...
show less
(sshd) Failed SSH login from 31.59.104.204 (IR/Iran/-): 5 in the last 3600 secs; Ports: *; Direction ...
show more(sshd) Failed SSH login from 31.59.104.204 (IR/Iran/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 7 18:56:13 da057 sshd[749853]: Invalid user orangepi from 31.59.104.204 port 41798
May 7 19:00:07 da057 sshd[753206]: Invalid user test from 31.59.104.204 port 47638
May 7 19:00:38 da057 sshd[753667]: Invalid user user from 31.59.104.204 port 46542
May 7 19:02:18 da057 sshd[754991]: Invalid user cirros from 31.59.104.204 port 39052
May 7 19:05:05 da057 sshd[757578]: User rpc from 31.59.104.204 not allowed because not listed in AllowUsers
show less
2026-05-07T23:54:03.291871+09:00 icn-home-arm-rpi5b1 sshd[3547398]: Invalid user orangepi from 31.59 ...
show more2026-05-07T23:54:03.291871+09:00 icn-home-arm-rpi5b1 sshd[3547398]: Invalid user orangepi from 31.59.104.204 port 58688
2026-05-07T23:54:03.296021+09:00 icn-home-arm-rpi5b1 sshd[3547398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.59.104.204
2026-05-07T23:54:05.687668+09:00 icn-home-arm-rpi5b1 sshd[3547398]: Failed password for invalid user orangepi from 31.59.104.204 port 58688 ssh2
2026-05-07T23:54:43.362489+09:00 icn-home-arm-rpi5b1 sshd[3547573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.59.104.204 user=root
2026-05-07T23:54:45.242447+09:00 icn-home-arm-rpi5b1 sshd[3547573]: Failed password for root from 31.59.104.204 port 55090 ssh2
...
show less
2026-05-07T22:40:30.445600+08:00 VM-8-9-debian sshd[3863906]: pam_unix(sshd:auth): authentication fa ...
show more2026-05-07T22:40:30.445600+08:00 VM-8-9-debian sshd[3863906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.59.104.204
2026-05-07T22:40:32.224922+08:00 VM-8-9-debian sshd[3863906]: Failed password for invalid user admin from 31.59.104.204 port 60830 ssh2
2026-05-07T22:41:24.270409+08:00 VM-8-9-debian sshd[3864027]: Invalid user orangepi from 31.59.104.204 port 54786
...
show less
Port Scan
Brute-Force
Showing 1 to
15
of 129 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩