104.131.5.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.131.55.236	attackspambots	Oct 14 05:08:59 localhost sshd[3675128]: Invalid user poornendu from 104.131.55.236 port 37530 ...	2020-10-14 04:31:49
104.131.55.236	attack	$f2bV_matches	2020-10-13 19:59:53
104.131.55.92	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-04T18:22:47Z and 2020-09-04T18:29:15Z	2020-09-06 01:50:48
104.131.55.92	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-04T18:22:47Z and 2020-09-04T18:29:15Z	2020-09-05 17:24:12
104.131.56.144	attackspambots	TCP Port: 25 invalid blocked Listed on barracuda also zen-spamhaus and Weighted-Private (db.wpbl.info) (125)	2020-09-02 03:03:38
104.131.55.92	attack	Aug 29 19:10:46 hanapaa sshd\[25784\]: Invalid user bae from 104.131.55.92 Aug 29 19:10:46 hanapaa sshd\[25784\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 Aug 29 19:10:48 hanapaa sshd\[25784\]: Failed password for invalid user bae from 104.131.55.92 port 55348 ssh2 Aug 29 19:14:23 hanapaa sshd\[26043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 user=root Aug 29 19:14:25 hanapaa sshd\[26043\]: Failed password for root from 104.131.55.92 port 53402 ssh2	2020-08-30 13:32:54
104.131.55.92	attackbots	2020-08-28 07:09:56.231740-0500 localhost sshd[35015]: Failed password for invalid user avorion from 104.131.55.92 port 43532 ssh2	2020-08-28 20:11:32
104.131.54.149	attack	104.131.54.149 - - [27/Aug/2020:12:46:58 +0300] "GET /adminer-3.5.0.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Safari/605.1.15"	2020-08-28 18:41:28
104.131.55.92	attackspambots	Aug 27 15:45:15 ny01 sshd[14440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92 Aug 27 15:45:18 ny01 sshd[14440]: Failed password for invalid user fredy from 104.131.55.92 port 57008 ssh2 Aug 27 15:50:08 ny01 sshd[15206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.92	2020-08-28 03:56:26
104.131.55.236	attack	2020-08-26T07:33:35.578818morrigan.ad5gb.com sshd[1361554]: Invalid user sinusbot from 104.131.55.236 port 39312 2020-08-26T07:33:38.340761morrigan.ad5gb.com sshd[1361554]: Failed password for invalid user sinusbot from 104.131.55.236 port 39312 ssh2	2020-08-27 03:46:22
104.131.55.92	attackspambots	SSH Brute Force	2020-08-27 01:34:00
104.131.55.92	attackbotsspam	Invalid user zsc from 104.131.55.92 port 50854	2020-08-26 13:08:12
104.131.55.236	attackbotsspam	Aug 25 20:30:30 plex-server sshd[3558329]: Invalid user test from 104.131.55.236 port 39922 Aug 25 20:30:30 plex-server sshd[3558329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 Aug 25 20:30:30 plex-server sshd[3558329]: Invalid user test from 104.131.55.236 port 39922 Aug 25 20:30:32 plex-server sshd[3558329]: Failed password for invalid user test from 104.131.55.236 port 39922 ssh2 Aug 25 20:34:18 plex-server sshd[3559905]: Invalid user net from 104.131.55.236 port 44329 ...	2020-08-26 08:07:03
104.131.55.92	attack	Triggered by Fail2Ban at Ares web server	2020-08-26 06:48:42
104.131.55.92	attackspambots	Automatic report - Banned IP Access	2020-08-25 03:58:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.5.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22423
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.5.20.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 14:05:42 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 20.5.131.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.5.131.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
128.199.178.188	attackbots	Sep 10 05:32:13 rpi sshd[25048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.178.188 Sep 10 05:32:15 rpi sshd[25048]: Failed password for invalid user admin from 128.199.178.188 port 47312 ssh2	2019-09-10 11:32:29
94.23.253.88	attack	SIPVicious Scanner Detection, PTR: ns3326296.ip-94-23-253.eu.	2019-09-10 11:19:01
149.56.132.202	attack	Sep 9 16:52:07 friendsofhawaii sshd\[18700\]: Invalid user hadoop from 149.56.132.202 Sep 9 16:52:07 friendsofhawaii sshd\[18700\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.ip-149-56-132.net Sep 9 16:52:10 friendsofhawaii sshd\[18700\]: Failed password for invalid user hadoop from 149.56.132.202 port 54414 ssh2 Sep 9 16:58:28 friendsofhawaii sshd\[19238\]: Invalid user 12345 from 149.56.132.202 Sep 9 16:58:28 friendsofhawaii sshd\[19238\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.ip-149-56-132.net	2019-09-10 11:10:46
58.144.151.45	attackbots		2019-09-10 11:08:30
89.216.113.174	attackspambots	Sep 10 05:23:22 vps691689 sshd[10813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.113.174 Sep 10 05:23:24 vps691689 sshd[10813]: Failed password for invalid user admin from 89.216.113.174 port 46780 ssh2 ...	2019-09-10 11:34:46
187.188.193.211	attack	Sep 10 02:34:58 localhost sshd\[26267\]: Invalid user webtool from 187.188.193.211 port 36840 Sep 10 02:34:58 localhost sshd\[26267\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.193.211 Sep 10 02:34:59 localhost sshd\[26267\]: Failed password for invalid user webtool from 187.188.193.211 port 36840 ssh2 Sep 10 02:43:12 localhost sshd\[26648\]: Invalid user bot2 from 187.188.193.211 port 40716 Sep 10 02:43:12 localhost sshd\[26648\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.193.211 ...	2019-09-10 11:09:32
165.227.15.124	attack	[munged]::443 165.227.15.124 - - [10/Sep/2019:03:21:45 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 165.227.15.124 - - [10/Sep/2019:03:21:46 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 165.227.15.124 - - [10/Sep/2019:03:21:48 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 165.227.15.124 - - [10/Sep/2019:03:21:50 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 165.227.15.124 - - [10/Sep/2019:03:21:52 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 165.227.15.124 - - [10/Sep/2019:03:21:54 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11	2019-09-10 11:17:53
119.40.33.22	attackbotsspam	Sep 9 17:19:39 kapalua sshd\[5287\]: Invalid user 12345 from 119.40.33.22 Sep 9 17:19:39 kapalua sshd\[5287\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.33.22 Sep 9 17:19:41 kapalua sshd\[5287\]: Failed password for invalid user 12345 from 119.40.33.22 port 43392 ssh2 Sep 9 17:25:34 kapalua sshd\[6564\]: Invalid user 12345 from 119.40.33.22 Sep 9 17:25:34 kapalua sshd\[6564\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.33.22	2019-09-10 11:39:44
201.182.103.183	attack	Automatic report - Port Scan Attack	2019-09-10 11:09:01
185.125.120.135	attackbots	Sep 10 03:22:11 smtp postfix/smtpd[6126]: NOQUEUE: reject: RCPT from unknown[185.125.120.135]: 554 5.7.1 Service unavailable; Client host [185.125.120.135] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?185.125.120.135; from= to= proto=ESMTP helo= ...	2019-09-10 11:11:38
193.112.164.113	attackbotsspam	Sep 9 17:20:17 hpm sshd\[31763\]: Invalid user www from 193.112.164.113 Sep 9 17:20:17 hpm sshd\[31763\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.164.113 Sep 9 17:20:19 hpm sshd\[31763\]: Failed password for invalid user www from 193.112.164.113 port 60714 ssh2 Sep 9 17:25:46 hpm sshd\[32250\]: Invalid user redmine from 193.112.164.113 Sep 9 17:25:46 hpm sshd\[32250\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.164.113	2019-09-10 11:38:42
74.63.250.6	attackspambots	Sep 10 05:11:52 hosting sshd[3557]: Invalid user student1 from 74.63.250.6 port 37422 ...	2019-09-10 11:08:13
112.85.42.177	attack	Sep 10 05:17:27 tux-35-217 sshd\[5218\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.177 user=root Sep 10 05:17:29 tux-35-217 sshd\[5218\]: Failed password for root from 112.85.42.177 port 22035 ssh2 Sep 10 05:17:32 tux-35-217 sshd\[5218\]: Failed password for root from 112.85.42.177 port 22035 ssh2 Sep 10 05:17:35 tux-35-217 sshd\[5218\]: Failed password for root from 112.85.42.177 port 22035 ssh2 ...	2019-09-10 11:37:12
76.72.8.136	attackbotsspam	Sep 10 03:08:14 vps sshd[18402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.72.8.136 Sep 10 03:08:16 vps sshd[18402]: Failed password for invalid user teamspeak3 from 76.72.8.136 port 51732 ssh2 Sep 10 03:21:59 vps sshd[19047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.72.8.136 ...	2019-09-10 11:19:35
124.156.140.219	attackspam	Sep 9 15:54:24 hcbb sshd\[25751\]: Invalid user deployer from 124.156.140.219 Sep 9 15:54:24 hcbb sshd\[25751\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.140.219 Sep 9 15:54:26 hcbb sshd\[25751\]: Failed password for invalid user deployer from 124.156.140.219 port 48070 ssh2 Sep 9 16:01:01 hcbb sshd\[26222\]: Invalid user test2 from 124.156.140.219 Sep 9 16:01:01 hcbb sshd\[26222\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.140.219	2019-09-10 11:33:37

Recently Reported IPs

104.131.49.12	104.131.52.124	134.169.58.223	104.131.55.134
104.131.66.139	104.131.60.113	104.131.71.215	104.131.73.114
104.131.67.74	104.131.70.126	104.131.74.126	104.131.69.211
104.131.83.249	104.149.63.141	104.149.63.172	104.152.108.117
104.152.108.141	104.152.109.166	104.152.110.183	104.149.70.86