104.131.8.148 - IPInfo

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.131.82.44	attack	Scan port	2023-06-12 15:39:16
104.131.82.44	attack	Scan port	2022-12-07 22:03:29
104.131.82.44	attack	Scan port	2022-11-16 13:46:34
104.131.82.44	attack	Scan port	2022-09-07 12:57:00
104.131.83.213	attackbotsspam	Sep 30 21:47:55 lnxweb61 sshd[8542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.83.213	2020-10-01 04:20:50
104.131.83.213	attackbotsspam	Sep 30 12:16:19 mout sshd[10016]: Invalid user cai from 104.131.83.213 port 54256	2020-09-30 20:32:35
104.131.83.213	attackbots	Sep 29 18:41:23 web9 sshd\[3469\]: Invalid user majordomo from 104.131.83.213 Sep 29 18:41:23 web9 sshd\[3469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.83.213 Sep 29 18:41:25 web9 sshd\[3469\]: Failed password for invalid user majordomo from 104.131.83.213 port 54494 ssh2 Sep 29 18:46:24 web9 sshd\[4246\]: Invalid user web from 104.131.83.213 Sep 29 18:46:24 web9 sshd\[4246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.83.213	2020-09-30 13:01:12
104.131.84.225	attackspambots	20 attempts against mh-ssh on cloud	2020-09-30 04:42:26
104.131.84.225	attackbots	Sep 29 13:48:31 prox sshd[12152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.84.225 Sep 29 13:48:33 prox sshd[12152]: Failed password for invalid user bugzilla from 104.131.84.225 port 45004 ssh2	2020-09-29 20:51:12
104.131.84.225	attackspam	Sep 29 00:39:32 minden010 sshd[17908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.84.225 Sep 29 00:39:34 minden010 sshd[17908]: Failed password for invalid user siva from 104.131.84.225 port 36318 ssh2 Sep 29 00:43:29 minden010 sshd[18949]: Failed password for root from 104.131.84.225 port 47298 ssh2 ...	2020-09-29 13:01:55
104.131.84.222	attackbotsspam	Invalid user webadmin from 104.131.84.222 port 57010	2020-09-28 01:01:13
104.131.84.222	attackspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-27T04:18:16Z and 2020-09-27T04:25:03Z	2020-09-27 17:03:40
104.131.88.115	attackbots	Sep 25 00:27:01 main sshd[29388]: Failed password for invalid user admin from 104.131.88.115 port 50588 ssh2 Sep 25 00:27:02 main sshd[29390]: Failed password for invalid user admin from 104.131.88.115 port 52342 ssh2 Sep 25 00:27:02 main sshd[29392]: Failed password for invalid user ubuntu from 104.131.88.115 port 54130 ssh2 Sep 25 00:27:03 main sshd[29396]: Failed password for invalid user user from 104.131.88.115 port 57684 ssh2 Sep 25 00:27:04 main sshd[29398]: Failed password for invalid user ubnt from 104.131.88.115 port 59452 ssh2 Sep 25 00:27:05 main sshd[29400]: Failed password for invalid user support from 104.131.88.115 port 32910 ssh2	2020-09-26 04:27:15
104.131.88.115	attack	Invalid user admin from 104.131.88.115 port 46348	2020-09-25 21:17:29
104.131.88.115	attackbotsspam	TCP (SYN) 104.131.88.115:41773 -> port 22, len 40	2020-09-25 12:55:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.8.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3830
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.8.148.			IN	A

;; AUTHORITY SECTION:
.			150	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052300 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 24 01:25:35 CST 2022
;; MSG SIZE  rcvd: 106

Host info

148.8.131.104.in-addr.arpa domain name pointer wpabstracts.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.8.131.104.in-addr.arpa	name = wpabstracts.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
216.74.125.170	attackspam	Mon, 22 Jul 2019 23:28:25 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:40:55
158.46.183.30	attackbots	Mon, 22 Jul 2019 23:28:32 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:28:16
216.74.125.209	attackspambots	Mon, 22 Jul 2019 23:28:38 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:11:09
103.133.108.205	attack	Jul 18 06:26:54 localhost postfix/smtpd[981]: lost connection after AUTH from unknown[103.133.108.205] Jul 18 06:27:41 localhost postfix/smtpd[981]: lost connection after AUTH from unknown[103.133.108.205] Jul 18 06:28:30 localhost postfix/smtpd[981]: lost connection after AUTH from unknown[103.133.108.205] Jul 18 06:29:18 localhost postfix/smtpd[981]: lost connection after AUTH from unknown[103.133.108.205] Jul 18 06:30:09 localhost postfix/smtpd[981]: lost connection after AUTH from unknown[103.133.108.205] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.133.108.205	2019-07-23 08:52:24
182.253.94.74	attack	Jul 23 03:39:50 srv-4 sshd\[6421\]: Invalid user sphinx from 182.253.94.74 Jul 23 03:39:50 srv-4 sshd\[6421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.94.74 Jul 23 03:39:52 srv-4 sshd\[6421\]: Failed password for invalid user sphinx from 182.253.94.74 port 32908 ssh2 ...	2019-07-23 08:48:42
45.91.89.119	attack	Mon, 22 Jul 2019 23:28:23 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:44:33
158.46.157.87	attackbots	Mon, 22 Jul 2019 23:28:26 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:40:06
185.201.129.8	attackbots	Mon, 22 Jul 2019 23:28:29 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:35:41
178.171.0.126	attackbotsspam	Mon, 22 Jul 2019 23:28:28 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:37:13
193.160.78.202	attackspambots	Mon, 22 Jul 2019 23:28:26 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:39:39
185.238.29.12	attack	WordPress login Brute force / Web App Attack on client site.	2019-07-23 08:47:44
77.247.108.164	attack	Splunk® : port scan detected: Jul 22 19:28:35 testbed kernel: Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=77.247.108.164 DST=104.248.11.191 LEN=448 TOS=0x08 PREC=0x00 TTL=52 ID=16174 DF PROTO=UDP SPT=5067 DPT=5060 LEN=428	2019-07-23 08:21:50
45.73.177.230	attack	Mon, 22 Jul 2019 23:28:24 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:45:09
168.90.190.230	attackbots	Jul x@x Jul 10 20:16:11 localhost postfix/smtpd[21878]: lost connection after RCPT from pop.pecaqualidade.com.br[168.90.190.230] Jul x@x Jul 10 20:19:08 localhost postfix/smtpd[21878]: lost connection after RCPT from pop.pecaqualidade.com.br[168.90.190.230] Jul x@x Jul 10 20:39:50 localhost postfix/smtpd[31466]: lost connection after RCPT from pop.pecaqualidade.com.br[168.90.190.230] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=168.90.190.230	2019-07-23 08:50:29
181.215.64.11	attack	Mon, 22 Jul 2019 23:28:31 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:27:54

Recently Reported IPs

104.131.73.239	104.131.84.147	104.131.86.223	104.131.87.232
104.131.88.155	104.131.88.73	104.131.91.135	104.131.92.171
104.131.92.222	104.131.92.86	104.131.93.150	104.131.93.95
104.131.96.16	104.140.101.222	104.140.101.6	104.140.12.202
104.140.125.176	104.140.127.108	104.140.127.111	104.140.127.116