104.131.12.172

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.131.128.20	proxy	VPN fraud	2023-03-27 12:51:53
104.131.12.184	attack	Oct 7 23:33:50 pornomens sshd\[27527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root Oct 7 23:33:53 pornomens sshd\[27527\]: Failed password for root from 104.131.12.184 port 36354 ssh2 Oct 8 00:03:03 pornomens sshd\[28137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root ...	2020-10-08 06:59:54
104.131.12.184	attackbotsspam	(sshd) Failed SSH login from 104.131.12.184 (US/United States/-): 10 in the last 3600 secs	2020-10-07 23:23:18
104.131.12.184	attackspambots	Oct 7 09:07:10 ns381471 sshd[12901]: Failed password for root from 104.131.12.184 port 53172 ssh2	2020-10-07 15:28:10
104.131.126.10	attack	Oct 1 20:52:41 gitlab sshd[2460932]: Invalid user ubuntu from 104.131.126.10 port 47952 Oct 1 20:52:41 gitlab sshd[2460932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.126.10 Oct 1 20:52:41 gitlab sshd[2460932]: Invalid user ubuntu from 104.131.126.10 port 47952 Oct 1 20:52:43 gitlab sshd[2460932]: Failed password for invalid user ubuntu from 104.131.126.10 port 47952 ssh2 Oct 1 20:56:10 gitlab sshd[2461469]: Invalid user mine from 104.131.126.10 port 56272 ...	2020-10-02 05:09:19
104.131.126.10	attack	Invalid user pierre from 104.131.126.10 port 40330	2020-10-01 21:27:32
104.131.126.10	attackspambots	Invalid user pierre from 104.131.126.10 port 40330	2020-10-01 13:43:08
104.131.12.67	attackspambots	Automatic report - Banned IP Access	2020-09-27 03:48:56
104.131.12.67	attackbotsspam	Automatic report - Banned IP Access	2020-09-26 19:49:40
104.131.126.10	attack	Brute-force attempt banned	2020-09-25 05:30:35
104.131.12.184	attack	2020-09-10 UTC: (2x) - media,root	2020-09-12 03:29:22
104.131.12.184	attackbots	2020-09-10 UTC: (2x) - media,root	2020-09-11 19:31:39
104.131.12.184	attackspambots	Sep 1 09:18:58 server sshd[10645]: Invalid user nfe from 104.131.12.184 port 43420 ...	2020-09-01 15:48:00
104.131.12.67	attackspam	104.131.12.67 - - [29/Aug/2020:08:29:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.12.67 - - [29/Aug/2020:08:29:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.12.67 - - [29/Aug/2020:08:29:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 16:48:45
104.131.12.184	attackbots	Invalid user student from 104.131.12.184 port 48256	2020-08-22 05:19:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.12.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18524
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.12.172.			IN	A

;; AUTHORITY SECTION:
.			548	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 19:11:48 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 172.12.131.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 172.12.131.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.61.188.40	attackspam	Oct 12 16:31:17 OPSO sshd\[15646\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.188.40 user=root Oct 12 16:31:19 OPSO sshd\[15646\]: Failed password for root from 182.61.188.40 port 45338 ssh2 Oct 12 16:35:47 OPSO sshd\[16561\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.188.40 user=root Oct 12 16:35:50 OPSO sshd\[16561\]: Failed password for root from 182.61.188.40 port 57278 ssh2 Oct 12 16:40:17 OPSO sshd\[17304\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.188.40 user=root	2019-10-12 22:44:29
91.214.130.253	attackbotsspam	2019-10-12 09:16:23 H=(host-91.214.130.253.ardinvest.net) [91.214.130.253]:54943 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-12 09:16:24 H=(host-91.214.130.253.ardinvest.net) [91.214.130.253]:54943 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/91.214.130.253) 2019-10-12 09:16:25 H=(host-91.214.130.253.ardinvest.net) [91.214.130.253]:54943 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-10-12 23:19:50
40.122.29.117	attackbotsspam	Oct 12 15:00:33 localhost sshd\[108068\]: Invalid user !QAZXSW@ from 40.122.29.117 port 1280 Oct 12 15:00:33 localhost sshd\[108068\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.122.29.117 Oct 12 15:00:35 localhost sshd\[108068\]: Failed password for invalid user !QAZXSW@ from 40.122.29.117 port 1280 ssh2 Oct 12 15:05:33 localhost sshd\[108204\]: Invalid user Par0la123!@\# from 40.122.29.117 port 1280 Oct 12 15:05:33 localhost sshd\[108204\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.122.29.117 ...	2019-10-12 23:17:11
92.222.216.81	attackspam	Oct 12 16:56:15 SilenceServices sshd[24396]: Failed password for root from 92.222.216.81 port 56012 ssh2 Oct 12 17:00:05 SilenceServices sshd[25413]: Failed password for root from 92.222.216.81 port 47063 ssh2	2019-10-12 23:19:32
5.189.184.125	attackbots	Oct 12 16:20:32 icinga sshd[15244]: Failed password for root from 5.189.184.125 port 43440 ssh2 Oct 12 16:21:00 icinga sshd[15347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.189.184.125 ...	2019-10-12 22:29:34
110.164.163.56	attackbots	Oct 12 04:15:59 wbs sshd\[20026\]: Invalid user elasticsearch from 110.164.163.56 Oct 12 04:15:59 wbs sshd\[20026\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.163.56 Oct 12 04:16:00 wbs sshd\[20026\]: Failed password for invalid user elasticsearch from 110.164.163.56 port 59522 ssh2 Oct 12 04:16:23 wbs sshd\[20060\]: Invalid user mc from 110.164.163.56 Oct 12 04:16:23 wbs sshd\[20060\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.163.56	2019-10-12 23:21:15
179.184.217.83	attack	Automatic report - Banned IP Access	2019-10-12 23:15:54
106.13.43.192	attackbots	Oct 12 16:13:22 markkoudstaal sshd[10131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.192 Oct 12 16:13:24 markkoudstaal sshd[10131]: Failed password for invalid user P@ssw0rt321 from 106.13.43.192 port 53406 ssh2 Oct 12 16:19:40 markkoudstaal sshd[10617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.43.192	2019-10-12 22:32:03
77.81.230.143	attackbotsspam	$f2bV_matches	2019-10-12 23:03:06
212.47.235.193	attack	scan r	2019-10-12 22:57:12
92.50.249.92	attackspam	Oct 12 14:45:10 web8 sshd\[11654\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.92 user=root Oct 12 14:45:13 web8 sshd\[11654\]: Failed password for root from 92.50.249.92 port 36914 ssh2 Oct 12 14:49:15 web8 sshd\[13531\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.92 user=root Oct 12 14:49:18 web8 sshd\[13531\]: Failed password for root from 92.50.249.92 port 46156 ssh2 Oct 12 14:53:20 web8 sshd\[15501\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.92 user=root	2019-10-12 22:59:08
14.207.198.36	attackbots	rdp brute-force attack 2019-10-12 15:31:14 ALLOW TCP 14.207.198.36 ###.###.###.### 59844 3391 0 - 0 0 0 - - - RECEIVE	2019-10-12 22:59:48
95.141.83.146	attack	Oct 12 16:52:25 vpn01 sshd[13036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.141.83.146 Oct 12 16:52:27 vpn01 sshd[13036]: Failed password for invalid user admin from 95.141.83.146 port 35650 ssh2 ...	2019-10-12 23:02:26
197.248.16.118	attackbotsspam	Oct 12 16:27:41 vps647732 sshd[311]: Failed password for root from 197.248.16.118 port 36864 ssh2 ...	2019-10-12 22:40:31
58.254.132.41	attack	Oct 12 04:57:55 kapalua sshd\[11883\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.41 user=root Oct 12 04:57:56 kapalua sshd\[11883\]: Failed password for root from 58.254.132.41 port 42850 ssh2 Oct 12 05:03:03 kapalua sshd\[12465\]: Invalid user 123 from 58.254.132.41 Oct 12 05:03:03 kapalua sshd\[12465\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.41 Oct 12 05:03:04 kapalua sshd\[12465\]: Failed password for invalid user 123 from 58.254.132.41 port 36570 ssh2	2019-10-12 23:03:40

Recently Reported IPs

104.131.12.161	104.131.125.117	104.131.128.83	104.131.128.96
104.131.13.88	104.131.130.40	104.131.132.135	104.131.132.64
104.131.134.94	104.131.149.64	104.131.15.232	134.13.69.211
104.131.15.94	104.131.156.107	104.131.16.36	104.131.164.125
104.131.165.46	104.131.165.7	104.131.17.170	104.131.171.183