104.131.22.119

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.131.22.18	attackbotsspam	104.131.22.18 - - [11/Sep/2020:08:16:40 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.22.18 - - [11/Sep/2020:08:16:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.22.18 - - [11/Sep/2020:08:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-12 02:55:40
104.131.22.18	attackspam	104.131.22.18 - - [11/Sep/2020:08:16:40 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.22.18 - - [11/Sep/2020:08:16:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.131.22.18 - - [11/Sep/2020:08:16:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-11 18:53:43
104.131.22.18	attack	digital ocean sponsor and attack. YAY! Jail. 104.131.22.18 - - [11/Aug/2020:12:04:27 -0400] "GET /wp-login.php HTTP/1.1" 404 809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0 0 "off:-:-" 197 1499	2020-08-12 03:17:00
104.131.221.38	attackbots	DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed	2020-04-19 20:30:57
104.131.221.118	attack	DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed	2020-04-17 22:45:52
104.131.221.197	attackspam	DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed	2020-04-17 21:18:48
104.131.222.45	attack	DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed	2020-04-13 19:11:03
104.131.221.38	attackspam	DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed	2020-04-10 23:34:18
104.131.224.81	attackspam	detected by Fail2Ban	2020-04-05 18:52:23
104.131.224.81	attack	Mar 31 01:06:53 ns381471 sshd[30702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.224.81 Mar 31 01:06:55 ns381471 sshd[30702]: Failed password for invalid user wo from 104.131.224.81 port 41894 ssh2	2020-03-31 07:36:23
104.131.224.81	attack	Mar 30 01:01:26 vps647732 sshd[29167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.224.81 Mar 30 01:01:28 vps647732 sshd[29167]: Failed password for invalid user hkcfpsmtp from 104.131.224.81 port 57981 ssh2 ...	2020-03-30 07:23:36
104.131.221.236	attackbots	DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2020-03-26 23:10:31
104.131.224.81	attackspambots	SSH login attempts @ 2020-03-17 22:46:26	2020-03-22 03:34:20
104.131.221.208	attack	DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2020-03-17 02:27:41
104.131.223.156	attackspam	DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2020-03-12 01:48:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.22.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53664
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.131.22.119.			IN	A

;; AUTHORITY SECTION:
.			497	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020122701 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 28 03:01:47 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 119.22.131.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 119.22.131.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
27.66.127.191	attackspambots	2019-07-24T12:41:02.603735stt-1.[munged] kernel: [8018080.141307] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=27.66.127.191 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=27164 DF PROTO=TCP SPT=53318 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-24T12:41:05.648756stt-1.[munged] kernel: [8018083.186327] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=27.66.127.191 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=27386 DF PROTO=TCP SPT=53318 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-24T12:41:11.732241stt-1.[munged] kernel: [8018089.269797] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=27.66.127.191 DST=[mungedIP1] LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=28163 DF PROTO=TCP SPT=53318 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0	2019-07-25 05:36:42
123.24.77.197	attackbotsspam	445/tcp [2019-07-24]1pkt	2019-07-25 05:47:28
206.189.166.172	attack	Invalid user jason from 206.189.166.172 port 51148	2019-07-25 06:15:49
186.226.224.103	attack	NOQUEUE: reject: RCPT from unknown\[186.226.224.103\]: 554 5.7.1 Service unavailable\; host \[186.226.224.103\] blocked using sbl-xbl.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBLCSS	2019-07-25 05:55:12
223.241.118.227	attack	CN POST user login?destination=commentreply6comment-form	2019-07-25 06:17:08
103.36.211.36	attack	Unauthorised access (Jul 24) SRC=103.36.211.36 LEN=40 TTL=106 ID=256 TCP DPT=1433 WINDOW=16384 SYN	2019-07-25 05:47:02
63.143.35.146	attackbotsspam	\[2019-07-24 17:43:49\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '63.143.35.146:61828' - Wrong password \[2019-07-24 17:43:49\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-24T17:43:49.728-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="921",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/61828",Challenge="37d7bfe7",ReceivedChallenge="37d7bfe7",ReceivedHash="fed903f65a0d398e694dfe1870f91060" \[2019-07-24 17:44:18\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '63.143.35.146:58184' - Wrong password \[2019-07-24 17:44:18\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-24T17:44:18.501-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6060",SessionID="0x7f06f8009f28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.	2019-07-25 05:59:09
188.191.165.230	attack	Automatic report - Port Scan Attack	2019-07-25 06:12:34
77.247.110.103	attack	\[2019-07-24 14:38:47\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T14:38:47.258-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="8011442038079252",SessionID="0x7f06f8009f28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.103/5070",ACLName="no_extension_match" \[2019-07-24 14:43:33\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T14:43:33.081-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="7011442038079252",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.103/5088",ACLName="no_extension_match" \[2019-07-24 14:48:02\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T14:48:02.253-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1011442038079252",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.103/5070",ACLName="	2019-07-25 06:03:29
205.234.121.122	attack	Fail2Ban Ban Triggered	2019-07-25 05:57:59
117.60.141.200	attack	Jul 24 19:19:26 lively sshd[7868]: Bad protocol version identification '' from 117.60.141.200 port 33318 Jul 24 19:19:28 lively sshd[7869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.60.141.200 user=r.r Jul 24 19:19:30 lively sshd[7869]: Failed password for r.r from 117.60.141.200 port 33451 ssh2 Jul 24 19:19:31 lively sshd[7869]: Connection closed by authenticating user r.r 117.60.141.200 port 33451 [preauth] Jul 24 19:19:34 lively sshd[7871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.60.141.200 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.60.141.200	2019-07-25 06:22:49
45.55.157.147	attackspam	Invalid user postgres from 45.55.157.147 port 32846	2019-07-25 05:48:50
103.127.167.156	attackspam	firewall-block, port(s): 23/tcp	2019-07-25 05:51:08
203.142.81.114	attack	SSH Brute Force, server-1 sshd[29990]: Failed password for invalid user tms from 203.142.81.114 port 45756 ssh2	2019-07-25 06:17:34
185.220.101.70	attackbotsspam	Jul 24 16:48:11 server sshd\[225384\]: Invalid user admin from 185.220.101.70 Jul 24 16:48:11 server sshd\[225384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.70 Jul 24 16:48:13 server sshd\[225384\]: Failed password for invalid user admin from 185.220.101.70 port 39606 ssh2 ...	2019-07-25 05:55:39

Recently Reported IPs

45.15.143.155	78.216.152.143	189.171.121.231	201.175.211.42
168.197.153.239	31.163.151.88	85.193.114.230	52.188.110.62
13.66.139.69	89.72.128.118	99.236.237.165	70.55.158.118
216.18.204.216	24.114.60.87	207.81.163.75	85.203.22.234
135.181.145.128	186.33.114.152	186.33.114.180	108.49.158.109