104.4.31.147 - IPInfo

Basic Info

City: Santa Ana

Region: California

Country: United States

Internet Service Provider: AT&T

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.4.31.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38282
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.4.31.147.			IN	A

;; AUTHORITY SECTION:
.			563	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100601 1800 900 604800 86400

;; Query time: 137 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 07 02:49:43 CST 2019
;; MSG SIZE  rcvd: 116

Host info

147.31.4.104.in-addr.arpa domain name pointer 104-4-31-147.lightspeed.irvnca.sbcglobal.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
147.31.4.104.in-addr.arpa	name = 104-4-31-147.lightspeed.irvnca.sbcglobal.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.15.115	attackspambots	Apr 30 14:28:25 minden010 sshd[11455]: Failed password for root from 222.186.15.115 port 39724 ssh2 Apr 30 14:28:28 minden010 sshd[11455]: Failed password for root from 222.186.15.115 port 39724 ssh2 Apr 30 14:28:31 minden010 sshd[11455]: Failed password for root from 222.186.15.115 port 39724 ssh2 ...	2020-04-30 20:31:12
122.7.240.188	attack	lfd: (smtpauth) Failed SMTP AUTH login from 122.7.240.188 (-): 5 in the last 3600 secs - Mon May 28 23:58:06 2018	2020-04-30 20:27:43
180.110.50.108	attack	Brute force blocker - service: proftpd1, proftpd2 - aantal: 43 - Mon May 28 16:55:16 2018	2020-04-30 20:20:02
::222.221.36.120	attackbotsspam	Brute force blocker - service: - aantal: 15 - Mon May 28 06:39:12 2018	2020-04-30 20:19:47
137.74.166.77	attack	2020-04-30T14:44:58.762128sd-86998 sshd[28261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.ip-137-74-166.eu user=root 2020-04-30T14:45:00.558186sd-86998 sshd[28261]: Failed password for root from 137.74.166.77 port 44232 ssh2 2020-04-30T14:49:23.488708sd-86998 sshd[28833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.ip-137-74-166.eu user=root 2020-04-30T14:49:25.997665sd-86998 sshd[28833]: Failed password for root from 137.74.166.77 port 55752 ssh2 2020-04-30T14:53:33.648961sd-86998 sshd[29170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.ip-137-74-166.eu user=root 2020-04-30T14:53:35.811551sd-86998 sshd[29170]: Failed password for root from 137.74.166.77 port 39038 ssh2 ...	2020-04-30 21:03:39
200.122.252.146	attackspam	Honeypot attack, port: 445, PTR: static-dedicado-200-122-252-146.une.net.co.	2020-04-30 20:42:51
185.50.149.26	attackbotsspam	[MK-VM1] Blocked by UFW	2020-04-30 20:56:11
51.91.253.21	attackbots	fail2ban/Apr 30 14:24:59 h1962932 sshd[944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=21.ip-51-91-253.eu user=root Apr 30 14:25:01 h1962932 sshd[944]: Failed password for root from 51.91.253.21 port 57776 ssh2 Apr 30 14:28:27 h1962932 sshd[1103]: Invalid user hannah from 51.91.253.21 port 38926 Apr 30 14:28:27 h1962932 sshd[1103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=21.ip-51-91-253.eu Apr 30 14:28:27 h1962932 sshd[1103]: Invalid user hannah from 51.91.253.21 port 38926 Apr 30 14:28:29 h1962932 sshd[1103]: Failed password for invalid user hannah from 51.91.253.21 port 38926 ssh2	2020-04-30 20:35:18
87.156.57.215	attackspam	2020-04-30T12:52:55.863856shield sshd\[30644\]: Invalid user hal from 87.156.57.215 port 12347 2020-04-30T12:52:55.867869shield sshd\[30644\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=p579c39d7.dip0.t-ipconnect.de 2020-04-30T12:52:57.486193shield sshd\[30644\]: Failed password for invalid user hal from 87.156.57.215 port 12347 ssh2 2020-04-30T12:56:31.845205shield sshd\[31214\]: Invalid user yt from 87.156.57.215 port 49939 2020-04-30T12:56:31.849119shield sshd\[31214\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=p579c39d7.dip0.t-ipconnect.de	2020-04-30 21:02:06
222.218.17.199	attack	Microsoft Mail Internet Headers Version 2.0 Received: from smtp08.amf-envoi.fr ([222.218.17.199]) by xxx with Microsoft SMTPSVC(6.0.3790.1830); Thu, 30 Apr 2020 14:22:52 +0200 Return-Path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=neolane; d=mail.mutualfirst.com; h=domainkey-signature:from:date:subject:to:reply-to:mime-version:x-mailer:message-id:x-250ok-cid:tenantheader:affinity:x-cust_messageid:x-cust_deliveryid:x-cust_instancename:messagemaxretry:messageretryperiod:messagewebvalidityduration:messagevalidityduration:x-cust_imsorgid:content-type; bh=Y2nHG3SSivsVKyFi1AdrfHePKyWz2fqvBGFuc2cweq8=; b=aVduqy418SlsI4o/vhualJyUhA7Y0A8cWL+XhUectdkQ7LOtB8KwdDGd3b3x1LcdRnGRN4mtrQGJipZNxbACqjxxq4U1ZWw0cOyxIQvtRmTC9LqD9XVxkYpyei7+5LU7ArDh3cb1zC59xTF20IYDAAsKIbYXgX37j24DNz0/Vi0= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=neolane; d=mail.mutualfirst.com; h=From:Date:Subject:To:Reply-To:MIME-Version:X-mailer:Message-ID:X-250ok-CID:TenantHeader:Af	2020-04-30 20:32:38
222.186.175.148	attackspambots	$f2bV_matches	2020-04-30 20:58:05
37.185.26.226	attack	Apr 30 14:28:09 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=37.185.26.226, lip=172.104.140.148, TLS, session=<5YFvMoGkEgwluRri> Apr 30 14:28:15 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=37.185.26.226, lip=172.104.140.148, TLS, session=<7ZyUMoGkGAwluRri> Apr 30 14:28:15 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=37.185.26.226, lip=172.104.140.148, TLS, session=<4x+UMoGkFwwluRri> Apr 30 14:28:26 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=37.185.26.226, lip=172.104.140.148, TLS, session=<8lEzM4GkNgwluRri> Apr 30 14:28:27 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=37.185.26.226, lip=172.104.140.148, TLS, session=	2020-04-30 20:38:54
103.70.131.39	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-30 20:26:38
172.97.4.189	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-30 20:33:23
165.22.241.112	attackspambots	Invalid user james from 165.22.241.112 port 13432	2020-04-30 20:18:02

Recently Reported IPs

179.247.114.22	31.163.139.244	183.186.176.26	54.78.187.223
61.5.80.9	184.180.249.6	204.100.29.57	87.214.198.185
194.209.23.98	108.201.70.47	196.145.61.19	65.200.98.179
59.120.137.242	137.138.192.88	82.99.252.82	213.176.136.39
222.65.86.5	97.231.67.212	69.37.105.31	140.172.10.122