104.131.1.21 - IPInfo

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.131.128.20	proxy	VPN fraud	2023-03-27 12:51:53
104.131.131.140	attack	Oct 9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498 Oct 9 00:27:54 electroncash sshd[3996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 Oct 9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498 Oct 9 00:27:56 electroncash sshd[3996]: Failed password for invalid user system from 104.131.131.140 port 51498 ssh2 Oct 9 00:32:04 electroncash sshd[5533]: Invalid user ftpguest from 104.131.131.140 port 54930 ...	2020-10-09 07:16:11
104.131.131.140	attackspambots	(sshd) Failed SSH login from 104.131.131.140 (US/United States/-): 5 in the last 3600 secs	2020-10-08 23:44:00
104.131.131.140	attack	Bruteforce detected by fail2ban	2020-10-08 15:39:58
104.131.12.184	attack	Oct 7 23:33:50 pornomens sshd\[27527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root Oct 7 23:33:53 pornomens sshd\[27527\]: Failed password for root from 104.131.12.184 port 36354 ssh2 Oct 8 00:03:03 pornomens sshd\[28137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root ...	2020-10-08 06:59:54
104.131.12.184	attackbotsspam	(sshd) Failed SSH login from 104.131.12.184 (US/United States/-): 10 in the last 3600 secs	2020-10-07 23:23:18
104.131.12.184	attackspambots	Oct 7 09:07:10 ns381471 sshd[12901]: Failed password for root from 104.131.12.184 port 53172 ssh2	2020-10-07 15:28:10
104.131.105.31	attack	[2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password [2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.263-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5326",Challenge="5c55fa14",ReceivedChallenge="5c55fa14",ReceivedHash="3454a3e3801b3f3bddaf6b8efb1363ed" [2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password [2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.344-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/53 ...	2020-10-07 03:02:54
104.131.105.31	attack	[2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password [2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.039-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Challenge="4a5492aa",ReceivedChallenge="4a5492aa",ReceivedHash="80e3cb7010cbde3d3c9cdf92d860a2bd" [2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password [2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.095-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Ch ...	2020-10-06 19:02:27
104.131.110.155	attackbotsspam	Detected by Fail2Ban	2020-10-05 06:27:55
104.131.110.155	attackspam	Oct 4 14:08:14 choloepus sshd[27653]: Did not receive identification string from 104.131.110.155 port 43642 Oct 4 14:08:24 choloepus sshd[27776]: Disconnected from invalid user root 104.131.110.155 port 59624 [preauth] Oct 4 14:08:36 choloepus sshd[27850]: Invalid user oracle from 104.131.110.155 port 44478 ...	2020-10-04 22:29:30
104.131.110.155	attackbotsspam	$f2bV_matches	2020-10-04 14:15:27
104.131.110.155	attack	web-1 [ssh] SSH Attack	2020-10-04 04:44:08
104.131.110.155	attackbots	Invalid user oracle from 104.131.110.155 port 45714	2020-10-03 20:51:43
104.131.110.155	attackspambots	Oct 3 06:39:36 doubuntu sshd[12773]: Did not receive identification string from 104.131.110.155 port 45172 ...	2020-10-03 06:58:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42317
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.1.21.			IN	A

;; AUTHORITY SECTION:
.			347	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032801 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 29 12:03:03 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 21.1.131.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 21.1.131.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
209.60.28.246	attackspam	Unauthorized connection attempt detected from IP address 209.60.28.246 to port 4567 [J]	2020-03-03 10:01:06
157.230.231.39	attack	Mar 3 02:56:38 vps691689 sshd[30203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.231.39 Mar 3 02:56:40 vps691689 sshd[30203]: Failed password for invalid user spark from 157.230.231.39 port 60172 ssh2 Mar 3 03:02:30 vps691689 sshd[30392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.231.39 ...	2020-03-03 10:07:23
61.5.45.22	attack	Honeypot attack, port: 81, PTR: ppp-jhr-b.telkom.net.id.	2020-03-03 10:02:00
35.197.227.71	attack	invalid login attempt (fremnet@1234)	2020-03-03 09:49:25
222.186.175.215	attack	Mar 3 06:53:11 gw1 sshd[16434]: Failed password for root from 222.186.175.215 port 57858 ssh2 Mar 3 06:53:23 gw1 sshd[16434]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 57858 ssh2 [preauth] ...	2020-03-03 09:56:00
192.241.183.220	spamattack	[2020/03/03 07:06:53] [192.241.183.220:2098-0] User jeff@luxnetcorp.com.tw AUTH fails. [2020/03/03 07:08:24] [192.241.183.220:2103-0] User jessie@luxnetcorp.com.tw AUTH fails. [2020/03/03 08:39:50] [192.241.183.220:2097-0] User yhwang@luxnetcorp.com.tw AUTH fails. [2020/03/03 09:13:22] [192.241.183.220:2105-0] User cthuang@luxnetcorp.com.tw AUTH fails. [2020/03/03 09:53:19] [192.241.183.220:2097-0] User james_chang@luxnetcorp.com.tw AUTH fails.	2020-03-03 10:22:24
77.40.10.30	attackbots	Brute force attempt	2020-03-03 10:01:35
94.191.120.164	attackbotsspam	Mar 3 05:52:31 sd-53420 sshd\[10158\]: Invalid user tom from 94.191.120.164 Mar 3 05:52:31 sd-53420 sshd\[10158\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.120.164 Mar 3 05:52:33 sd-53420 sshd\[10158\]: Failed password for invalid user tom from 94.191.120.164 port 48724 ssh2 Mar 3 05:59:34 sd-53420 sshd\[10782\]: Invalid user aero-stoked from 94.191.120.164 Mar 3 05:59:34 sd-53420 sshd\[10782\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.120.164 ...	2020-03-03 13:02:24
95.18.219.148	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-03 09:46:00
85.109.82.133	attackbotsspam	Automatic report - Port Scan Attack	2020-03-03 13:03:26
222.186.190.2	attackbots	2020-03-03T03:10:46.376453vps773228.ovh.net sshd[24643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-03-03T03:10:47.812805vps773228.ovh.net sshd[24643]: Failed password for root from 222.186.190.2 port 38200 ssh2 2020-03-03T03:10:51.567988vps773228.ovh.net sshd[24643]: Failed password for root from 222.186.190.2 port 38200 ssh2 2020-03-03T03:10:46.376453vps773228.ovh.net sshd[24643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-03-03T03:10:47.812805vps773228.ovh.net sshd[24643]: Failed password for root from 222.186.190.2 port 38200 ssh2 2020-03-03T03:10:51.567988vps773228.ovh.net sshd[24643]: Failed password for root from 222.186.190.2 port 38200 ssh2 2020-03-03T03:10:46.376453vps773228.ovh.net sshd[24643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-03-03T03:10:47.81 ...	2020-03-03 10:12:52
185.137.233.125	attack	Mar 3 05:59:38 debian-2gb-nbg1-2 kernel: \[5470758.400138\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.137.233.125 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=29397 PROTO=TCP SPT=41717 DPT=4005 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-03 13:00:16
119.236.215.5	attack	Unauthorized connection attempt detected from IP address 119.236.215.5 to port 5555 [J]	2020-03-03 09:45:36
27.79.160.11	attack	1583211577 - 03/03/2020 05:59:37 Host: 27.79.160.11/27.79.160.11 Port: 445 TCP Blocked	2020-03-03 13:01:55
5.26.119.62	attackspam	Unauthorized connection attempt detected from IP address 5.26.119.62 to port 23 [J]	2020-03-03 10:04:03

Recently Reported IPs

104.130.29.149	104.131.109.43	104.131.111.200	104.131.112.134
104.131.116.21	104.131.119.125	104.131.127.64	104.131.137.201
104.131.146.249	104.131.15.145	104.131.153.95	104.131.154.233
104.131.16.212	104.131.160.30	104.131.160.62	104.131.162.38
104.131.166.152	104.131.168.253	104.131.172.42	104.131.175.63