Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.140.148.58 attackspam
firewall-block, port(s): 161/udp
2019-09-21 04:37:23
104.140.148.58 attack
Sep 11 14:57:21 localhost kernel: [1966058.443067] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=2495 PROTO=TCP SPT=65325 DPT=987 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 11 14:57:21 localhost kernel: [1966058.443093] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=2495 PROTO=TCP SPT=65325 DPT=987 SEQ=3815533082 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405B4) 
Sep 11 14:59:52 localhost kernel: [1966209.518449] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=43417 PROTO=TCP SPT=64300 DPT=5910 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 11 14:59:52 localhost kernel: [1966209.518469] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=104.140.148.58 DST=[mungedIP2] LEN=4
2019-09-12 03:13:24
104.140.148.58 attackspam
23.08.2019 20:09:25 Connection to port 21 blocked by firewall
2019-08-24 04:38:34
104.140.148.58 attackbotsspam
Automatic report - Port Scan Attack
2019-07-30 03:10:28
104.140.148.58 attackbots
8444/tcp 21/tcp 5900/tcp...
[2019-06-13/07-24]35pkt,13pt.(tcp),1pt.(udp)
2019-07-26 11:47:12
104.140.148.58 attackbotsspam
" "
2019-07-25 06:38:18
104.140.148.58 attackspambots
22.07.2019 18:53:41 Connection to port 3306 blocked by firewall
2019-07-23 05:55:25
104.140.148.58 attackbots
RDP brute force attack detected by fail2ban
2019-07-18 14:04:36
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       104.140.0.0 - 104.140.255.255
CIDR:           104.140.0.0/16
NetName:        EONIX
NetHandle:      NET-104-140-0-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Eonix Corporation (EONIX)
RegDate:        2014-06-20
Updated:        2019-02-28
Comment:        Please use the below contact information to report suspected security issues specific to traffic emanating from net blocks in this range, including the distribution of malicious content or other illicit or illegal material.
Comment:        
Comment:        For SPAM and other abuse issues, please contact: 
Comment:        * net-abuse@eonix.net 
Comment:        
Comment:        For legal and law enforcement-related requests, please contact: 
Comment:        * legal@eonix.net 
Comment:        
Comment:        For Routing, Peering or DNS issues, please contact:
Comment:        * noc@eonix.net
Ref:            https://rdap.arin.net/registry/ip/104.140.0.0


OrgName:        Eonix Corporation
OrgId:          EONIX
Address:        9107 W Russell Rd Suite 100
City:           Las Vegas
StateProv:      NV
PostalCode:     89148
Country:        US
RegDate:        2006-05-31
Updated:        2025-10-16
Comment:        Please use the below contact information to report suspected security issues specific to traffic emanating from net blocks in this range, including the distribution of malicious content or other illicit or illegal material.
Comment:        
Comment:        For SPAM and other abuse issues, please contact: 
Comment:        * net-abuse@eonix.net 
Comment:        
Comment:        For legal and law enforcement-related requests, please contact: 
Comment:        * legal@eonix.net 
Comment:        
Comment:        For Routing, Peering or DNS issues, please contact:
Comment:        * noc@eonix.net
Ref:            https://rdap.arin.net/registry/entity/EONIX


OrgAbuseHandle: NTS22-ARIN
OrgAbuseName:   Network Trust and Safety
OrgAbusePhone:  +1-702-605-2981 
OrgAbuseEmail:  net-admin@eonix.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NTS22-ARIN

OrgNOCHandle: NOC31884-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-702-605-2981 
OrgNOCEmail:  noc@eonix.net
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC31884-ARIN

OrgTechHandle: EDM7-ARIN
OrgTechName:   Eonix DNS Management 
OrgTechPhone:  +1-877-841-3341 
OrgTechEmail:  902214@serverhub.com
OrgTechRef:    https://rdap.arin.net/registry/entity/EDM7-ARIN

OrgAbuseHandle: NTS29-ARIN
OrgAbuseName:   Network Trust and Safety
OrgAbusePhone:  +1-702-605-2981 
OrgAbuseEmail:  net-admin@eonix.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NTS29-ARIN

OrgDNSHandle: EDM7-ARIN
OrgDNSName:   Eonix DNS Management 
OrgDNSPhone:  +1-877-841-3341 
OrgDNSEmail:  902214@serverhub.com
OrgDNSRef:    https://rdap.arin.net/registry/entity/EDM7-ARIN

OrgTechHandle: NOC31884-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-702-605-2981 
OrgTechEmail:  noc@eonix.net
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC31884-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.140.148.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34676
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.140.148.102.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026041301 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 14 04:30:24 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 102.148.140.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.148.140.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
46.225.119.60 attackbotsspam
2019-10-07 06:41:48 H=(livingarts.it) [46.225.119.60]:41818 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-07 06:41:49 H=(livingarts.it) [46.225.119.60]:41818 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-07 06:41:50 H=(livingarts.it) [46.225.119.60]:41818 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-10-08 00:39:36
31.21.40.179 attackbots
Honeypot attack, port: 23, PTR: 179-40-21-31.ftth.glasoperator.nl.
2019-10-08 00:09:03
201.76.178.51 attackspambots
Oct  7 06:39:17 wbs sshd\[24742\]: Invalid user P@ssw0rd@1234 from 201.76.178.51
Oct  7 06:39:17 wbs sshd\[24742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=maq01.crcrj.org.br
Oct  7 06:39:19 wbs sshd\[24742\]: Failed password for invalid user P@ssw0rd@1234 from 201.76.178.51 port 52129 ssh2
Oct  7 06:44:01 wbs sshd\[25194\]: Invalid user P@ssw0rd@1234 from 201.76.178.51
Oct  7 06:44:01 wbs sshd\[25194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=maq01.crcrj.org.br
2019-10-08 00:47:48
5.135.179.178 attack
Oct  7 11:55:35 work-partkepr sshd\[29269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.179.178  user=root
Oct  7 11:55:37 work-partkepr sshd\[29269\]: Failed password for root from 5.135.179.178 port 40414 ssh2
...
2019-10-08 00:40:11
46.101.17.215 attackspam
Oct  7 04:20:20 tdfoods sshd\[16700\]: Invalid user P@\$\$w0rt0101 from 46.101.17.215
Oct  7 04:20:20 tdfoods sshd\[16700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=policies.musiciansfirst.com
Oct  7 04:20:23 tdfoods sshd\[16700\]: Failed password for invalid user P@\$\$w0rt0101 from 46.101.17.215 port 37198 ssh2
Oct  7 04:24:34 tdfoods sshd\[17087\]: Invalid user Photo2017 from 46.101.17.215
Oct  7 04:24:34 tdfoods sshd\[17087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=policies.musiciansfirst.com
2019-10-08 00:49:53
222.186.175.6 attackbotsspam
2019-10-07T17:00:56.134868+01:00 suse sshd[5862]: User root from 222.186.175.6 not allowed because not listed in AllowUsers
2019-10-07T17:01:01.128417+01:00 suse sshd[5862]: error: PAM: Authentication failure for illegal user root from 222.186.175.6
2019-10-07T17:00:56.134868+01:00 suse sshd[5862]: User root from 222.186.175.6 not allowed because not listed in AllowUsers
2019-10-07T17:01:01.128417+01:00 suse sshd[5862]: error: PAM: Authentication failure for illegal user root from 222.186.175.6
2019-10-07T17:00:56.134868+01:00 suse sshd[5862]: User root from 222.186.175.6 not allowed because not listed in AllowUsers
2019-10-07T17:01:01.128417+01:00 suse sshd[5862]: error: PAM: Authentication failure for illegal user root from 222.186.175.6
2019-10-07T17:01:01.142651+01:00 suse sshd[5862]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.6 port 20576 ssh2
...
2019-10-08 00:11:52
96.125.164.243 attackspambots
villaromeo.de 96.125.164.243 \[07/Oct/2019:13:41:34 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; en-US\; rv:1.9.0.1\) Gecko/2008070208 Firefox/3.0.1"
villaromeo.de 96.125.164.243 \[07/Oct/2019:13:41:36 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 \(Windows\; U\; Windows NT 5.1\; en-US\; rv:1.9.0.1\) Gecko/2008070208 Firefox/3.0.1"
2019-10-08 00:48:07
45.136.109.238 attack
3389BruteforceFW21
2019-10-08 00:34:30
54.37.138.172 attackspam
$f2bV_matches
2019-10-08 00:15:08
49.88.112.65 attack
Oct  7 05:55:43 hanapaa sshd\[14871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65  user=root
Oct  7 05:55:45 hanapaa sshd\[14871\]: Failed password for root from 49.88.112.65 port 25173 ssh2
Oct  7 05:56:19 hanapaa sshd\[14920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65  user=root
Oct  7 05:56:21 hanapaa sshd\[14920\]: Failed password for root from 49.88.112.65 port 45582 ssh2
Oct  7 05:57:05 hanapaa sshd\[14977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65  user=root
2019-10-08 00:38:20
118.189.171.202 attack
$f2bV_matches
2019-10-08 00:13:33
103.114.107.209 attackbots
Oct  7 18:41:39 webhost01 sshd[18207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.114.107.209
Oct  7 18:41:40 webhost01 sshd[18207]: Failed password for invalid user support from 103.114.107.209 port 53515 ssh2
...
2019-10-08 00:39:05
129.211.27.10 attack
Oct  7 18:06:59 icinga sshd[28248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.27.10
Oct  7 18:07:01 icinga sshd[28248]: Failed password for invalid user Qaz123$ from 129.211.27.10 port 43038 ssh2
...
2019-10-08 00:45:01
84.245.9.208 attack
" "
2019-10-08 00:20:25
112.198.194.243 attackspambots
Oct  7 17:45:36 mail sshd[28978]: Failed password for root from 112.198.194.243 port 56896 ssh2
Oct  7 17:50:27 mail sshd[29751]: Failed password for root from 112.198.194.243 port 36191 ssh2
2019-10-08 00:45:27

Recently Reported IPs

2606:4700:10::ac43:125e 2606:4700:10::ac43:662 164.155.74.103 209.195.129.133
187.201.249.128 165.154.235.77 5.182.207.245 34.122.34.149
103.74.20.7 3.89.226.152 2606:4700:10::6814:8801 2606:4700:10::6814:9913
2606:4700:10::6816:258 3.92.239.65 14.212.70.200 100.53.171.244
2606:4700:10::6814:9637 2606:4700:10::6814:5954 2606:4700:10::6814:5445 2606:4700:10::6814:5355