104.250.131.142

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.250.131.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58298
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.250.131.142.		IN	A

;; AUTHORITY SECTION:
.			491	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031400 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 14 19:19:23 CST 2022
;; MSG SIZE  rcvd: 108

Host info

142.131.250.104.in-addr.arpa domain name pointer 104-250-131-142.static.gorillaservers.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.131.250.104.in-addr.arpa	name = 104-250-131-142.static.gorillaservers.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
62.109.18.89	attackbots	IP blocked	2020-10-03 19:43:38
106.12.46.179	attack	2020-10-03T07:32:45+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)	2020-10-03 19:40:37
5.135.161.7	attackspam	$f2bV_matches	2020-10-03 19:38:00
178.80.54.189	attackspam	178.80.54.189 - - [02/Oct/2020:22:37:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 178.80.54.189 - - [02/Oct/2020:22:37:22 +0100] "POST /wp-login.php HTTP/1.1" 200 7644 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 178.80.54.189 - - [02/Oct/2020:22:38:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-10-03 19:47:50
46.187.38.244	attackbots	TCP (SYN) 46.187.38.244:47144 -> port 1080, len 60	2020-10-03 19:53:34
116.196.101.168	attack	Oct 3 08:10:26 jumpserver sshd[449772]: Invalid user jenkins from 116.196.101.168 port 57708 Oct 3 08:10:28 jumpserver sshd[449772]: Failed password for invalid user jenkins from 116.196.101.168 port 57708 ssh2 Oct 3 08:13:27 jumpserver sshd[449777]: Invalid user sig from 116.196.101.168 port 40332 ...	2020-10-03 19:57:38
45.143.221.41	attack	[2020-10-03 01:26:22] NOTICE[1182] chan_sip.c: Registration from '"90" ' failed for '45.143.221.41:5706' - Wrong password [2020-10-03 01:26:22] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T01:26:22.683-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5706",Challenge="0e1c923a",ReceivedChallenge="0e1c923a",ReceivedHash="b39ce408c896502e1e1727b866803eb9" [2020-10-03 01:26:22] NOTICE[1182] chan_sip.c: Registration from '"90" ' failed for '45.143.221.41:5706' - Wrong password [2020-10-03 01:26:22] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T01:26:22.872-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7f22f8081ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/ ...	2020-10-03 19:21:29
206.81.12.141	attackbots	1601722006 - 10/03/2020 12:46:46 Host: 206.81.12.141/206.81.12.141 Port: 99 TCP Blocked ...	2020-10-03 19:46:05
191.239.249.47	attack	Oct 3 11:44:37 prod4 sshd\[22715\]: Failed password for root from 191.239.249.47 port 55074 ssh2 Oct 3 11:47:18 prod4 sshd\[23956\]: Invalid user ansibleuser from 191.239.249.47 Oct 3 11:47:20 prod4 sshd\[23956\]: Failed password for invalid user ansibleuser from 191.239.249.47 port 38860 ssh2 ...	2020-10-03 19:17:20
71.94.65.190	attackbotsspam	ssh 22	2020-10-03 19:27:40
190.85.163.46	attackbotsspam	2020-10-03T10:07:13.993947shield sshd\[19806\]: Invalid user ansible from 190.85.163.46 port 49765 2020-10-03T10:07:14.005630shield sshd\[19806\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.163.46 2020-10-03T10:07:16.468801shield sshd\[19806\]: Failed password for invalid user ansible from 190.85.163.46 port 49765 ssh2 2020-10-03T10:11:28.705758shield sshd\[20209\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.163.46 user=root 2020-10-03T10:11:30.366648shield sshd\[20209\]: Failed password for root from 190.85.163.46 port 53818 ssh2	2020-10-03 19:39:22
51.89.148.69	attackbotsspam	Invalid user guest1 from 51.89.148.69 port 57754	2020-10-03 19:41:03
189.213.45.125	attackbots	[H1.VM8] Blocked by UFW	2020-10-03 19:38:51
117.6.86.134	attackbots	fail2ban -- 117.6.86.134 ...	2020-10-03 19:25:53
103.141.174.130	attackbotsspam	srvr2: (mod_security) mod_security (id:920350) triggered by 103.141.174.130 (BD/-/-): 1 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/02 22:33:37 [error] 142888#0: 187758 [client 103.141.174.130] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160167081795.491896"] [ref "o0,15v21,15"], client: 103.141.174.130, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-10-03 19:51:23

Recently Reported IPs

104.25.99.4	215.197.71.158	101.202.53.136	8.80.104.76
104.250.133.61	104.250.140.115	104.250.142.119	104.250.148.186
104.250.148.67	104.250.148.71	161.178.108.189	15.110.1.9
104.250.148.73	104.251.210.112	104.251.214.65	104.251.215.30
104.251.216.174	104.251.216.199	104.251.217.126	104.252.144.38