Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Itaquaquecetuba

Region: Sao Paulo

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       131.100.0.0 - 131.100.255.255
CIDR:           131.100.0.0/16
NetName:        LACNIC-ERX-131-100-0-0
NetHandle:      NET-131-100-0-0-1
Parent:         NET131 (NET-131-0-0-0-0)
NetType:        Transferred to LACNIC
OriginAS:       
Organization:   Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is under LACNIC responsibility
Comment:        for further allocations to users in LACNIC region.
Comment:        Please see http://www.lacnic.net/ for further details,
Comment:        or check the WHOIS server located at http://whois.lacnic.net
Ref:            https://rdap.arin.net/registry/ip/131.100.0.0

ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink:  whois.lacnic.net


OrgName:        Latin American and Caribbean IP address Regional Registry
OrgId:          LACNIC
Address:        Rambla Republica de Mexico 6125
City:           Montevideo
StateProv:      
PostalCode:     11400
Country:        UY
RegDate:        2002-07-27
Updated:        2018-03-15
Ref:            https://rdap.arin.net/registry/entity/LACNIC

ReferralServer:  whois://whois.lacnic.net
ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName:   LACNIC Whois Info
OrgAbusePhone:  +598-2604-2222 
OrgAbuseEmail:  abuse@lacnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/LWI100-ARIN

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info
OrgTechPhone:  +598-2604-2222 
OrgTechEmail:  whois-contact@lacnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/LACNIC-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.lacnic.net.

% IP Client: 124.223.158.242
 % Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-06-24T22:25:26-03:00 - 124.223.158.242

inetnum:     131.100.128.0/22
aut-num:     AS262907
abuse-c:     BRTSO52
owner:       BRASIL TECPAR | AMIGO | AVATO
ownerid:     07.756.651/0001-55
responsible: MAGNUM FOLETTO
owner-c:     MMF140
tech-c:      OROTE
created:     20140814
changed:     20260622

nic-hdl-br:  MMF140
person:      Magnum Mello Foletto
created:     20010922
changed:     20251016

nic-hdl-br:  BRTSO52
person:      Brasil TecPar SOC
created:     20220309
changed:     20230817

nic-hdl-br:  OROTE
person:      Opera��es de Rede - Omega Tecnologia
created:     20061114
changed:     20230227

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.100.131.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13399
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;131.100.131.141.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026062402 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 25 09:25:26 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 141.131.100.131.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.131.100.131.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
195.154.251.44 attack
Trying ports that it shouldn't be.
2019-08-04 16:46:24
76.27.98.228 attackbotsspam
Aug  4 08:08:47 game-panel sshd[2379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.27.98.228
Aug  4 08:08:49 game-panel sshd[2379]: Failed password for invalid user admin from 76.27.98.228 port 47414 ssh2
Aug  4 08:08:52 game-panel sshd[2379]: Failed password for invalid user admin from 76.27.98.228 port 47414 ssh2
Aug  4 08:08:55 game-panel sshd[2379]: Failed password for invalid user admin from 76.27.98.228 port 47414 ssh2
2019-08-04 16:36:58
77.247.109.72 attackbots
\[2019-08-04 04:42:08\] NOTICE\[2288\] chan_sip.c: Registration from '"9999" \' failed for '77.247.109.72:6110' - Wrong password
\[2019-08-04 04:42:08\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-04T04:42:08.400-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9999",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/6110",Challenge="0e7203d1",ReceivedChallenge="0e7203d1",ReceivedHash="351f01fe20d4464868e96444fbbfd857"
\[2019-08-04 04:42:08\] NOTICE\[2288\] chan_sip.c: Registration from '"9999" \' failed for '77.247.109.72:6110' - Wrong password
\[2019-08-04 04:42:08\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-04T04:42:08.554-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9999",SessionID="0x7ff4d02d8f48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD
2019-08-04 16:50:41
118.25.128.19 attack
Aug  4 05:05:49 MK-Soft-VM5 sshd\[25800\]: Invalid user jeff from 118.25.128.19 port 60114
Aug  4 05:05:49 MK-Soft-VM5 sshd\[25800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.128.19
Aug  4 05:05:51 MK-Soft-VM5 sshd\[25800\]: Failed password for invalid user jeff from 118.25.128.19 port 60114 ssh2
...
2019-08-04 16:52:51
200.203.222.166 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-04 16:55:33
89.248.162.168 attackspambots
08/04/2019-04:28:51.634578 89.248.162.168 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 94
2019-08-04 16:33:38
218.92.1.132 attackbots
2019-08-03 UTC: 549x - (549x)
2019-08-04 16:27:56
139.59.5.222 attackbots
WordPress XMLRPC scan :: 139.59.5.222 0.976 BYPASS [04/Aug/2019:15:10:11  1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 503 19380 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-04 16:36:04
41.202.0.153 attackbots
Aug  4 09:17:35 webhost01 sshd[11763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.202.0.153
Aug  4 09:17:38 webhost01 sshd[11763]: Failed password for invalid user ales from 41.202.0.153 port 12092 ssh2
...
2019-08-04 16:37:33
84.77.0.124 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-04 16:36:30
54.37.120.112 attackspam
Aug  4 11:45:44 pkdns2 sshd\[53920\]: Invalid user otis from 54.37.120.112Aug  4 11:45:46 pkdns2 sshd\[53920\]: Failed password for invalid user otis from 54.37.120.112 port 46946 ssh2Aug  4 11:49:44 pkdns2 sshd\[54054\]: Invalid user ventas from 54.37.120.112Aug  4 11:49:47 pkdns2 sshd\[54054\]: Failed password for invalid user ventas from 54.37.120.112 port 42188 ssh2Aug  4 11:53:52 pkdns2 sshd\[54237\]: Invalid user helpdesk from 54.37.120.112Aug  4 11:53:53 pkdns2 sshd\[54237\]: Failed password for invalid user helpdesk from 54.37.120.112 port 37398 ssh2
...
2019-08-04 16:57:10
185.143.221.186 attack
firewall-block, port(s): 2144/tcp, 9483/tcp, 10068/tcp, 15313/tcp, 16737/tcp, 35347/tcp, 43270/tcp, 46955/tcp, 62437/tcp, 62578/tcp
2019-08-04 17:11:11
139.198.122.76 attackspambots
Invalid user leslie from 139.198.122.76 port 42392
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.76
Failed password for invalid user leslie from 139.198.122.76 port 42392 ssh2
Invalid user ward from 139.198.122.76 port 35086
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.76
2019-08-04 16:44:16
123.206.174.21 attackspam
Aug  4 06:58:02 server sshd\[9495\]: User root from 123.206.174.21 not allowed because listed in DenyUsers
Aug  4 06:58:02 server sshd\[9495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21  user=root
Aug  4 06:58:04 server sshd\[9495\]: Failed password for invalid user root from 123.206.174.21 port 15366 ssh2
Aug  4 07:05:14 server sshd\[17713\]: Invalid user fax from 123.206.174.21 port 12939
Aug  4 07:05:14 server sshd\[17713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21
2019-08-04 17:08:34
185.230.127.239 attackspambots
Invalid user hduser from 185.230.127.239 port 36013
2019-08-04 16:52:22

Recently Reported IPs

2606:4700:10::6816:1521 172.21.183.31 101.47.91.191 172.236.9.230
170.80.65.181 103.120.188.245 47.95.205.23 200.36.5.242
35.187.93.84 34.38.192.51 125.117.173.57 110.78.138.235
2606:4700:10::6816:1997 2606:4700:10::6814:7702 45.168.169.80 153.117.15.213
121.41.176.251 2606:4700:10::6816:2524 5.226.140.94 20.118.24.61