131.196.8.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ecuador

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
131.196.86.49	attackbots	Attempted Brute Force (dovecot)	2020-08-11 19:19:36
131.196.87.229	attackbots	Icarus honeypot on github	2020-06-27 07:27:32
131.196.87.229	attack	Icarus honeypot on github	2020-06-23 01:07:02
131.196.8.232	attack	Unauthorized connection attempt detected from IP address 131.196.8.232 to port 8080	2020-05-31 20:30:56
131.196.8.19	attackbots	Unauthorized connection attempt detected from IP address 131.196.8.19 to port 23	2020-05-31 03:00:13
131.196.8.251	attackspam	unauthorized connection attempt	2020-02-07 16:38:25
131.196.8.36	attackbotsspam	port scan and connect, tcp 23 (telnet)	2020-01-02 04:31:23
131.196.8.234	attackbots	This ip tried to take over my Netflix account from Ecuador	2019-10-24 03:31:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.196.8.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35022
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;131.196.8.34.			IN	A

;; AUTHORITY SECTION:
.			421	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:32:59 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 34.8.196.131.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.8.196.131.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.216.140.252	attackbotsspam	2811/tcp 2805/tcp 2813/tcp... [2019-08-12/09-30]3098pkt,883pt.(tcp)	2019-09-30 20:31:09
49.88.112.85	attackbots	Sep 30 12:36:22 venus sshd\[26711\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.85 user=root Sep 30 12:36:25 venus sshd\[26711\]: Failed password for root from 49.88.112.85 port 15534 ssh2 Sep 30 12:36:27 venus sshd\[26711\]: Failed password for root from 49.88.112.85 port 15534 ssh2 ...	2019-09-30 20:39:32
60.179.251.68	attackspam	Automated reporting of SSH Vulnerability scanning	2019-09-30 20:22:24
222.186.180.19	attackbotsspam	$f2bV_matches	2019-09-30 20:47:22
192.241.183.220	attackspam	Sep 30 08:13:51 ny01 sshd[9963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.183.220 Sep 30 08:13:53 ny01 sshd[9963]: Failed password for invalid user costin from 192.241.183.220 port 60239 ssh2 Sep 30 08:17:45 ny01 sshd[10689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.183.220	2019-09-30 20:30:41
78.128.113.115	attackbotsspam	Sep 30 14:35:04 mail postfix/smtpd\[7586\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 30 14:35:11 mail postfix/smtpd\[9112\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 30 14:44:28 mail postfix/smtpd\[10254\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-09-30 21:01:16
95.182.79.41	attackspam	$f2bV_matches	2019-09-30 20:17:57
141.98.80.76	attackbots	Sep 30 14:57:34 vmanager6029 postfix/smtpd\[25587\]: warning: unknown\[141.98.80.76\]: SASL PLAIN authentication failed: Sep 30 14:57:43 vmanager6029 postfix/smtpd\[25587\]: warning: unknown\[141.98.80.76\]: SASL PLAIN authentication failed:	2019-09-30 21:00:28
110.231.55.13	attackspam	Unauthorised access (Sep 30) SRC=110.231.55.13 LEN=40 TTL=48 ID=448 TCP DPT=8080 WINDOW=9945 SYN Unauthorised access (Sep 30) SRC=110.231.55.13 LEN=40 TTL=48 ID=29286 TCP DPT=8080 WINDOW=9945 SYN Unauthorised access (Sep 30) SRC=110.231.55.13 LEN=40 TTL=48 ID=9272 TCP DPT=8080 WINDOW=64257 SYN Unauthorised access (Sep 30) SRC=110.231.55.13 LEN=40 TTL=48 ID=24437 TCP DPT=8080 WINDOW=64257 SYN	2019-09-30 20:21:46
115.220.163.52	attackbots	Automated reporting of SSH Vulnerability scanning	2019-09-30 20:28:42
151.101.76.116	attackspambots	Message ID Created at: Sun, Sep 29, 2019 at 5:25 PM (Delivered after 19941 seconds) From: Serexin Male Enhancement To: Subject: Serexin - Stronger erections enough to drive your partner crazy! SPF: PASS with IP 3.227.52.158	2019-09-30 20:46:12
85.235.67.67	attackspambots	Sep 30 11:36:01 icinga sshd[29927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.235.67.67 Sep 30 11:36:03 icinga sshd[29927]: Failed password for invalid user linux from 85.235.67.67 port 42912 ssh2 ...	2019-09-30 20:12:38
177.144.242.214	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/177.144.242.214/ BR - 1H : (1004) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN27699 IP : 177.144.242.214 CIDR : 177.144.192.0/18 PREFIX COUNT : 267 UNIQUE IP COUNT : 6569728 WYKRYTE ATAKI Z ASN27699 : 1H - 5 3H - 15 6H - 23 12H - 45 24H - 70 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-30 20:11:37
192.241.249.19	attack	Sep 29 18:21:44 php1 sshd\[29448\]: Invalid user ncs from 192.241.249.19 Sep 29 18:21:44 php1 sshd\[29448\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=picasso.logoworks.com Sep 29 18:21:47 php1 sshd\[29448\]: Failed password for invalid user ncs from 192.241.249.19 port 40904 ssh2 Sep 29 18:26:32 php1 sshd\[30032\]: Invalid user user from 192.241.249.19 Sep 29 18:26:32 php1 sshd\[30032\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=picasso.logoworks.com	2019-09-30 20:13:43
138.68.20.158	attackbotsspam	09/30/2019-08:17:57.144099 138.68.20.158 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 8	2019-09-30 20:26:16

Recently Reported IPs

131.196.8.226	131.196.80.28	131.196.8.67	118.172.253.240
131.196.82.3	131.196.82.30	131.196.83.17	131.196.87.198
131.196.87.137	131.196.87.117	131.196.87.119	131.196.86.51
131.196.9.112	118.172.253.250	131.196.9.133	131.196.9.184
131.196.9.193	131.196.9.199	131.196.9.243	131.196.9.2