This IP address has been reported a total of
31
times from
28 distinct
sources.
104.131.60.151 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Unwanted traffic detected by honeypot on March 05, 2026: port scans (1 port 22 scan), and brute forc ...
show moreUnwanted traffic detected by honeypot on March 05, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (17 over ssh).
show less
Attack chain involved credential brute-force via Go-based SSH client against five weak root password ...
show moreAttack chain involved credential brute-force via Go-based SSH client against five weak root passwords (123123, 123321, 1q2w3e4r, 1qaz2wsx, 654321). Upon successful authentication across 7 sessions, attacker executed reconnaissance and persistence setup. Initial command removed immutability flags from bash/zsh configuration files (.bashrc, .zshrc) to enable later modification. Subsequent commands gathered system fingerprinting: OS type/version, hostname, architecture, and uptime via uname and /proc/uptime parsing. These recon queries indicate preparation for environment-aware payload deployment or persistence injection into shell initialization files. No malware downloads, lateral movement, or port forwards observed in captured activity. Attack pattern consistent with automated scanning using dictionary credentials followed by post-compromise enumeration for targeted follow-up exploitation.
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-03-05T17:56:36Z and 2026-03-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-03-05T17:56:36Z and 2026-03-05T18:01:46Z
show less
Connection closed by authenticating user root 104.131.60.151 port 54692 [preauth]
Connection closed ...
show moreConnection closed by authenticating user root 104.131.60.151 port 54692 [preauth]
Connection closed by authenticating user root 104.131.60.151 port 54122 [preauth]
Connection closed by authenticating user root 104.131.60.151 port 47202 [preauth]
Connection closed by authenticating user root 104.131.60.151 port 48166 [preauth]
Connection closed by authenticating user root 104.131.60.151 port 46020 [preauth]
show less