104.131.12.67 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Automatic report - Banned IP Access	2020-09-27 03:48:56
attackbotsspam	Automatic report - Banned IP Access	2020-09-26 19:49:40
attackspam	104.131.12.67 - - [29/Aug/2020:08:29:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.12.67 - - [29/Aug/2020:08:29:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.12.67 - - [29/Aug/2020:08:29:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 16:48:45
attack	104.131.12.67 - - [20/Aug/2020:08:10:14 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.12.67 - - [20/Aug/2020:08:10:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.12.67 - - [20/Aug/2020:08:10:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-20 15:09:18
attack	HTTP DDOS	2020-08-19 19:47:30

Comments on same subnet:

IP	Type	Details	Datetime
104.131.128.20	proxy	VPN fraud	2023-03-27 12:51:53
104.131.12.184	attack	Oct 7 23:33:50 pornomens sshd\[27527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root Oct 7 23:33:53 pornomens sshd\[27527\]: Failed password for root from 104.131.12.184 port 36354 ssh2 Oct 8 00:03:03 pornomens sshd\[28137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184 user=root ...	2020-10-08 06:59:54
104.131.12.184	attackbotsspam	(sshd) Failed SSH login from 104.131.12.184 (US/United States/-): 10 in the last 3600 secs	2020-10-07 23:23:18
104.131.12.184	attackspambots	Oct 7 09:07:10 ns381471 sshd[12901]: Failed password for root from 104.131.12.184 port 53172 ssh2	2020-10-07 15:28:10
104.131.126.10	attack	Oct 1 20:52:41 gitlab sshd[2460932]: Invalid user ubuntu from 104.131.126.10 port 47952 Oct 1 20:52:41 gitlab sshd[2460932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.126.10 Oct 1 20:52:41 gitlab sshd[2460932]: Invalid user ubuntu from 104.131.126.10 port 47952 Oct 1 20:52:43 gitlab sshd[2460932]: Failed password for invalid user ubuntu from 104.131.126.10 port 47952 ssh2 Oct 1 20:56:10 gitlab sshd[2461469]: Invalid user mine from 104.131.126.10 port 56272 ...	2020-10-02 05:09:19
104.131.126.10	attack	Invalid user pierre from 104.131.126.10 port 40330	2020-10-01 21:27:32
104.131.126.10	attackspambots	Invalid user pierre from 104.131.126.10 port 40330	2020-10-01 13:43:08
104.131.126.10	attack	Brute-force attempt banned	2020-09-25 05:30:35
104.131.12.184	attack	2020-09-10 UTC: (2x) - media,root	2020-09-12 03:29:22
104.131.12.184	attackbots	2020-09-10 UTC: (2x) - media,root	2020-09-11 19:31:39
104.131.12.184	attackspambots	Sep 1 09:18:58 server sshd[10645]: Invalid user nfe from 104.131.12.184 port 43420 ...	2020-09-01 15:48:00
104.131.12.184	attackbots	Invalid user student from 104.131.12.184 port 48256	2020-08-22 05:19:54
104.131.12.184	attackbots	Aug 19 02:33:53 main sshd[32668]: Failed password for invalid user rich from 104.131.12.184 port 53102 ssh2	2020-08-20 04:15:15
104.131.12.184	attackspambots	Invalid user student from 104.131.12.184 port 48256	2020-08-19 18:02:49
104.131.12.184	attackspam	Aug 14 21:25:55 cosmoit sshd[15112]: Failed password for root from 104.131.12.184 port 58674 ssh2	2020-08-15 03:35:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.12.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50105
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.131.12.67.			IN	A

;; AUTHORITY SECTION:
.			463	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081900 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 19 19:47:22 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 67.12.131.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 67.12.131.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
58.250.161.97	attack	Automatic report - Banned IP Access	2019-10-01 18:44:13
118.24.28.39	attackspambots	Oct 1 07:00:49 vps01 sshd[32620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.28.39 Oct 1 07:00:51 vps01 sshd[32620]: Failed password for invalid user 12345 from 118.24.28.39 port 59286 ssh2	2019-10-01 18:14:45
61.190.124.188	attackspambots	port scan and connect, tcp 23 (telnet)	2019-10-01 18:15:40
201.235.19.122	attackbots	$f2bV_matches	2019-10-01 18:13:26
192.165.228.133	attackspambots	Unauthorised access (Oct 1) SRC=192.165.228.133 LEN=40 TTL=244 ID=52749 TCP DPT=445 WINDOW=1024 SYN	2019-10-01 18:12:28
52.176.110.203	attack	Oct 1 10:41:57 icinga sshd[27357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.176.110.203 Oct 1 10:41:59 icinga sshd[27357]: Failed password for invalid user ox from 52.176.110.203 port 60311 ssh2 Oct 1 10:53:17 icinga sshd[34967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.176.110.203 ...	2019-10-01 18:35:41
164.132.81.106	attack	Oct 1 10:18:53 game-panel sshd[32608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.81.106 Oct 1 10:18:56 game-panel sshd[32608]: Failed password for invalid user alberding from 164.132.81.106 port 39112 ssh2 Oct 1 10:22:13 game-panel sshd[32726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.81.106	2019-10-01 18:43:37
222.240.1.0	attack	F2B jail: sshd. Time: 2019-10-01 06:42:39, Reported by: VKReport	2019-10-01 18:25:58
92.118.38.52	attackbots	Oct 1 09:04:46 heicom postfix/smtpd\[14553\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Oct 1 09:07:58 heicom postfix/smtpd\[14739\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Oct 1 09:10:57 heicom postfix/smtpd\[15009\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Oct 1 09:14:11 heicom postfix/smtpd\[15183\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure Oct 1 09:17:13 heicom postfix/smtpd\[15513\]: warning: unknown\[92.118.38.52\]: SASL LOGIN authentication failed: authentication failure ...	2019-10-01 18:45:52
34.93.238.77	attackspam	Oct 1 10:06:59 hcbbdb sshd\[16562\]: Invalid user vpnuser1 from 34.93.238.77 Oct 1 10:06:59 hcbbdb sshd\[16562\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.238.93.34.bc.googleusercontent.com Oct 1 10:07:01 hcbbdb sshd\[16562\]: Failed password for invalid user vpnuser1 from 34.93.238.77 port 47834 ssh2 Oct 1 10:12:11 hcbbdb sshd\[17134\]: Invalid user info from 34.93.238.77 Oct 1 10:12:11 hcbbdb sshd\[17134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.238.93.34.bc.googleusercontent.com	2019-10-01 18:24:48
58.17.243.151	attackbotsspam	$f2bV_matches	2019-10-01 18:12:58
46.162.193.21	attack	2019-09-30 22:47:53 H=(host-21.193.162.46.ucom.am) [46.162.193.21]:58015 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/query/ip/46.162.193.21) 2019-09-30 22:47:53 H=(host-21.193.162.46.ucom.am) [46.162.193.21]:58015 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/query/ip/46.162.193.21) 2019-09-30 22:47:54 H=(host-21.193.162.46.ucom.am) [46.162.193.21]:58015 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-10-01 18:19:16
46.182.106.190	attackbots	Oct 1 11:36:53 rotator sshd\[18845\]: Failed password for root from 46.182.106.190 port 46759 ssh2Oct 1 11:36:55 rotator sshd\[18845\]: Failed password for root from 46.182.106.190 port 46759 ssh2Oct 1 11:36:58 rotator sshd\[18845\]: Failed password for root from 46.182.106.190 port 46759 ssh2Oct 1 11:37:01 rotator sshd\[18845\]: Failed password for root from 46.182.106.190 port 46759 ssh2Oct 1 11:37:03 rotator sshd\[18845\]: Failed password for root from 46.182.106.190 port 46759 ssh2Oct 1 11:37:06 rotator sshd\[18845\]: Failed password for root from 46.182.106.190 port 46759 ssh2 ...	2019-10-01 18:11:42
212.142.154.175	attack	[portscan] tcp/23 [TELNET] *(RWIN=13656)(10011016)	2019-10-01 18:32:54
154.120.226.102	attackspam	Oct 1 08:13:25 mail sshd\[19041\]: Invalid user ubuntu from 154.120.226.102 port 45402 Oct 1 08:13:25 mail sshd\[19041\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.120.226.102 Oct 1 08:13:27 mail sshd\[19041\]: Failed password for invalid user ubuntu from 154.120.226.102 port 45402 ssh2 Oct 1 08:19:32 mail sshd\[19727\]: Invalid user ubnt from 154.120.226.102 port 57804 Oct 1 08:19:32 mail sshd\[19727\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.120.226.102	2019-10-01 18:43:58

Recently Reported IPs

96.149.51.95	35.43.242.107	135.233.243.124	1.202.1.59
110.154.212.114	143.215.187.184	219.137.228.233	3.25.207.32
100.74.68.240	27.67.228.228	172.82.136.21	218.166.76.164
1.20.203.226	178.137.18.202	171.97.20.155	113.161.89.181
181.16.29.166	114.39.72.149	59.126.89.160	51.81.75.33