104.131.1.74 - IPInfo

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.131.128.20	proxy	VPN fraud	2023-03-27 12:51:53
104.131.131.140	attack	Oct 9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498 Oct 9 00:27:54 electroncash sshd[3996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 Oct 9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498 Oct 9 00:27:56 electroncash sshd[3996]: Failed password for invalid user system from 104.131.131.140 port 51498 ssh2 Oct 9 00:32:04 electroncash sshd[5533]: Invalid user ftpguest from 104.131.131.140 port 54930 ...	2020-10-09 07:16:11
104.131.131.140	attackspambots	(sshd) Failed SSH login from 104.131.131.140 (US/United States/-): 5 in the last 3600 secs	2020-10-08 23:44:00
104.131.131.140	attack	Bruteforce detected by fail2ban	2020-10-08 15:39:58
104.131.12.184	attack	Oct 7 23:33:50 pornomens sshd\[27527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root Oct 7 23:33:53 pornomens sshd\[27527\]: Failed password for root from 104.131.12.184 port 36354 ssh2 Oct 8 00:03:03 pornomens sshd\[28137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root ...	2020-10-08 06:59:54
104.131.12.184	attackbotsspam	(sshd) Failed SSH login from 104.131.12.184 (US/United States/-): 10 in the last 3600 secs	2020-10-07 23:23:18
104.131.12.184	attackspambots	Oct 7 09:07:10 ns381471 sshd[12901]: Failed password for root from 104.131.12.184 port 53172 ssh2	2020-10-07 15:28:10
104.131.105.31	attack	[2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password [2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.263-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5326",Challenge="5c55fa14",ReceivedChallenge="5c55fa14",ReceivedHash="3454a3e3801b3f3bddaf6b8efb1363ed" [2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password [2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.344-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/53 ...	2020-10-07 03:02:54
104.131.105.31	attack	[2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password [2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.039-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Challenge="4a5492aa",ReceivedChallenge="4a5492aa",ReceivedHash="80e3cb7010cbde3d3c9cdf92d860a2bd" [2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password [2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.095-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Ch ...	2020-10-06 19:02:27
104.131.110.155	attackbotsspam	Detected by Fail2Ban	2020-10-05 06:27:55
104.131.110.155	attackspam	Oct 4 14:08:14 choloepus sshd[27653]: Did not receive identification string from 104.131.110.155 port 43642 Oct 4 14:08:24 choloepus sshd[27776]: Disconnected from invalid user root 104.131.110.155 port 59624 [preauth] Oct 4 14:08:36 choloepus sshd[27850]: Invalid user oracle from 104.131.110.155 port 44478 ...	2020-10-04 22:29:30
104.131.110.155	attackbotsspam	$f2bV_matches	2020-10-04 14:15:27
104.131.110.155	attack	web-1 [ssh] SSH Attack	2020-10-04 04:44:08
104.131.110.155	attackbots	Invalid user oracle from 104.131.110.155 port 45714	2020-10-03 20:51:43
104.131.110.155	attackspambots	Oct 3 06:39:36 doubuntu sshd[12773]: Did not receive identification string from 104.131.110.155 port 45172 ...	2020-10-03 06:58:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.1.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.1.74.			IN	A

;; AUTHORITY SECTION:
.			473	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052100 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 21 17:42:07 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 74.1.131.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 74.1.131.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
145.239.78.232	attackbotsspam	1 Attack(s) Detected [DoS Attack: SYN/ACK Scan] from source: 145.239.78.232, port 18977, Wednesday, August 12, 2020 05:56:56	2020-08-13 15:05:08
50.248.41.235	attackbots	Aug 13 06:45:54 piServer sshd[32565]: Failed password for root from 50.248.41.235 port 54342 ssh2 Aug 13 06:48:46 piServer sshd[456]: Failed password for root from 50.248.41.235 port 45146 ssh2 ...	2020-08-13 14:40:24
106.55.151.227	attackbots	Aug 13 06:58:03 ajax sshd[6797]: Failed password for root from 106.55.151.227 port 50190 ssh2	2020-08-13 14:44:35
141.98.80.67	attack	2020-08-13 09:01:49 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data $set_id=id@jugend-ohne-grenzen.net$ 2020-08-13 09:01:56 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data 2020-08-13 09:02:05 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data 2020-08-13 09:02:10 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data 2020-08-13 09:02:22 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data 2020-08-13 09:02:27 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data 2020-08-13 09:02:32 dovecot_login authenticator failed for $\[141.98.80.67\]$ \[141.98.80.67\]: 535 Incorrect authentication data ...	2020-08-13 15:05:26
61.133.232.252	attackbotsspam	Aug 13 07:11:15 ncomp sshd[28432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.252 user=root Aug 13 07:11:17 ncomp sshd[28432]: Failed password for root from 61.133.232.252 port 49108 ssh2 Aug 13 07:54:34 ncomp sshd[29038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.252 user=root Aug 13 07:54:36 ncomp sshd[29038]: Failed password for root from 61.133.232.252 port 1712 ssh2	2020-08-13 14:50:15
110.77.135.148	attackbots	sshd jail - ssh hack attempt	2020-08-13 14:28:11
195.189.96.150	attackbotsspam	1 Attack(s) Detected [DoS Attack: TCP/UDP Chargen] from source: 195.189.96.150, port 58752, Tuesday, August 11, 2020 14:28:56	2020-08-13 15:01:29
185.74.4.17	attackbots	Aug 13 09:07:33 hosting sshd[19344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.17 user=root Aug 13 09:07:35 hosting sshd[19344]: Failed password for root from 185.74.4.17 port 60034 ssh2 Aug 13 09:12:07 hosting sshd[19763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.17 user=root Aug 13 09:12:08 hosting sshd[19763]: Failed password for root from 185.74.4.17 port 36951 ssh2 ...	2020-08-13 14:30:37
218.92.0.224	attackbots	Aug 13 07:38:51 ajax sshd[21254]: Failed password for root from 218.92.0.224 port 16509 ssh2 Aug 13 07:38:55 ajax sshd[21254]: Failed password for root from 218.92.0.224 port 16509 ssh2	2020-08-13 14:43:37
91.234.254.111	attackspam	3 Attack(s) Detected [DoS Attack: SYN/ACK Scan] from source: 91.234.254.111, port 50002, Wednesday, August 12, 2020 05:52:52 [DoS Attack: SYN/ACK Scan] from source: 91.234.254.111, port 50002, Wednesday, August 12, 2020 05:52:25 [DoS Attack: SYN/ACK Scan] from source: 91.234.254.111, port 50002, Wednesday, August 12, 2020 05:45:22	2020-08-13 14:56:25
194.158.199.136	attackbots	7 Attack(s) Detected [DoS Attack: RST Scan] from source: 194.158.199.136, port 25, Wednesday, August 12, 2020 00:53:30 [DoS Attack: ACK Scan] from source: 194.158.199.136, port 25, Wednesday, August 12, 2020 00:07:29 [DoS Attack: ACK Scan] from source: 194.158.199.136, port 25, Tuesday, August 11, 2020 23:38:48 [DoS Attack: ACK Scan] from source: 194.158.199.136, port 25, Tuesday, August 11, 2020 23:32:31 [DoS Attack: ACK Scan] from source: 194.158.199.136, port 25, Tuesday, August 11, 2020 23:30:21 [DoS Attack: SYN/ACK Scan] from source: 194.158.199.136, port 25, Tuesday, August 11, 2020 22:51:13 [DoS Attack: SYN/ACK Scan] from source: 194.158.199.136, port 25, Tuesday, August 11, 2020 15:56:00	2020-08-13 14:52:28
182.16.114.14	attackbotsspam	1 Attack(s) Detected [DoS Attack: ACK Scan] from source: 182.16.114.14, port 80, Monday, August 10, 2020 23:38:00	2020-08-13 15:03:50
49.233.208.45	attack	Aug 13 04:00:30 django-0 sshd[22299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.208.45 user=root Aug 13 04:00:32 django-0 sshd[22299]: Failed password for root from 49.233.208.45 port 47174 ssh2 ...	2020-08-13 14:45:37
178.124.138.120	attackbots	TCP (SYN,ACK) 178.124.138.120:80 -> port 20783, len 44	2020-08-13 15:04:40
192.99.57.32	attackspambots	Brute-force attempt banned	2020-08-13 14:47:24

Recently Reported IPs

104.130.83.72	104.131.104.110	104.131.104.154	108.247.144.172
104.131.105.251	104.131.106.130	104.131.12.138	104.131.120.187
104.131.125.141	104.131.127.187	104.131.130.185	104.131.133.123
104.140.35.222	104.140.35.43	104.140.79.234	104.140.90.192
104.142.255.224	104.143.10.95	104.143.142.77	104.143.34.11