50.31.134.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Mochanin Corp.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Dec 6 10:40:23 ns382633 sshd\[23119\]: Invalid user ooya from 50.31.134.104 port 33404 Dec 6 10:40:23 ns382633 sshd\[23119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.104 Dec 6 10:40:25 ns382633 sshd\[23119\]: Failed password for invalid user ooya from 50.31.134.104 port 33404 ssh2 Dec 6 10:45:33 ns382633 sshd\[24026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.104 user=root Dec 6 10:45:35 ns382633 sshd\[24026\]: Failed password for root from 50.31.134.104 port 51390 ssh2	2019-12-06 18:53:13

Type

Details

Datetime

attackspam

Dec  6 10:40:23 ns382633 sshd\[23119\]: Invalid user ooya from 50.31.134.104 port 33404
Dec  6 10:40:23 ns382633 sshd\[23119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.104
Dec  6 10:40:25 ns382633 sshd\[23119\]: Failed password for invalid user ooya from 50.31.134.104 port 33404 ssh2
Dec  6 10:45:33 ns382633 sshd\[24026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.104  user=root
Dec  6 10:45:35 ns382633 sshd\[24026\]: Failed password for root from 50.31.134.104 port 51390 ssh2

2019-12-06 18:53:13

Comments on same subnet:

IP	Type	Details	Datetime
50.31.134.63	attack	Detected by ModSecurity. Request URI: /xmlrpc.php	2020-03-13 23:59:49
50.31.134.230	attack	Nov 24 21:20:59 hpm sshd\[10492\]: Invalid user solitairhols from 50.31.134.230 Nov 24 21:20:59 hpm sshd\[10492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.230 Nov 24 21:21:01 hpm sshd\[10492\]: Failed password for invalid user solitairhols from 50.31.134.230 port 53261 ssh2 Nov 24 21:27:23 hpm sshd\[11010\]: Invalid user home from 50.31.134.230 Nov 24 21:27:23 hpm sshd\[11010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.230	2019-11-25 16:03:37

Type

Details

Datetime

50.31.134.63

attack

Detected by ModSecurity. Request URI: /xmlrpc.php

2020-03-13 23:59:49

50.31.134.230

attack

Nov 24 21:20:59 hpm sshd\[10492\]: Invalid user solitairhols from 50.31.134.230
Nov 24 21:20:59 hpm sshd\[10492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.230
Nov 24 21:21:01 hpm sshd\[10492\]: Failed password for invalid user solitairhols from 50.31.134.230 port 53261 ssh2
Nov 24 21:27:23 hpm sshd\[11010\]: Invalid user home from 50.31.134.230
Nov 24 21:27:23 hpm sshd\[11010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.31.134.230

2019-11-25 16:03:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.31.134.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;50.31.134.104.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120600 1800 900 604800 86400

;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 06 18:53:03 CST 2019
;; MSG SIZE  rcvd: 117

Host info

104.134.31.50.in-addr.arpa domain name pointer unknown.servercentral.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.134.31.50.in-addr.arpa	name = unknown.servercentral.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
42.6.85.134	attack	Unauthorised access (Aug 27) SRC=42.6.85.134 LEN=40 TTL=46 ID=54621 TCP DPT=8080 WINDOW=35241 SYN Unauthorised access (Aug 26) SRC=42.6.85.134 LEN=40 TTL=46 ID=51162 TCP DPT=8080 WINDOW=35241 SYN	2020-08-28 02:34:51
41.226.14.36	attackbots	Aug 27 20:13:43 lukav-desktop sshd\[30260\]: Invalid user db2das1 from 41.226.14.36 Aug 27 20:13:43 lukav-desktop sshd\[30260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.226.14.36 Aug 27 20:13:45 lukav-desktop sshd\[30260\]: Failed password for invalid user db2das1 from 41.226.14.36 port 39544 ssh2 Aug 27 20:17:29 lukav-desktop sshd\[10719\]: Invalid user brady from 41.226.14.36 Aug 27 20:17:29 lukav-desktop sshd\[10719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.226.14.36	2020-08-28 02:24:05
54.39.22.191	attackbotsspam	[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.	2020-08-28 02:28:17
197.43.254.91	attackbotsspam	" "	2020-08-28 02:31:36
114.5.198.101	attackbots	IP 114.5.198.101 attacked honeypot on port: 1433 at 8/27/2020 5:59:15 AM	2020-08-28 02:08:10
165.227.114.134	attackbotsspam	Triggered by Fail2Ban at Ares web server	2020-08-28 02:30:32
99.17.246.167	attack	Aug 27 14:29:39 ny01 sshd[3004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.17.246.167 Aug 27 14:29:41 ny01 sshd[3004]: Failed password for invalid user db from 99.17.246.167 port 39280 ssh2 Aug 27 14:35:43 ny01 sshd[3823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.17.246.167	2020-08-28 02:43:32
106.52.115.36	attackbots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-28 02:32:13
81.68.72.231	attackspambots	Aug 27 18:11:19 root sshd[18855]: Failed password for root from 81.68.72.231 port 51968 ssh2 Aug 27 18:28:28 root sshd[21024]: Failed password for root from 81.68.72.231 port 57158 ssh2 ...	2020-08-28 02:40:24
46.103.179.248	attackspam	Aug 27 14:58:53 server postfix/smtpd[11484]: NOQUEUE: reject: RCPT from 46-179-248.adsl.cyta.gr[46.103.179.248]: 554 5.7.1 Service unavailable; Client host [46.103.179.248] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/46.103.179.248; from= to= proto=ESMTP helo=<46-179-248.adsl.cyta.gr>	2020-08-28 02:26:59
124.160.96.249	attackbotsspam	Aug 27 19:41:20 lnxweb61 sshd[26305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.96.249	2020-08-28 02:18:20
222.186.30.57	attack	Aug 27 15:16:45 vps46666688 sshd[22238]: Failed password for root from 222.186.30.57 port 23642 ssh2 Aug 27 15:16:47 vps46666688 sshd[22238]: Failed password for root from 222.186.30.57 port 23642 ssh2 ...	2020-08-28 02:16:57
218.92.0.246	attackspambots	2020-08-27T18:21:11.450164abusebot-6.cloudsearch.cf sshd[5065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.246 user=root 2020-08-27T18:21:13.256888abusebot-6.cloudsearch.cf sshd[5065]: Failed password for root from 218.92.0.246 port 10680 ssh2 2020-08-27T18:21:16.695229abusebot-6.cloudsearch.cf sshd[5065]: Failed password for root from 218.92.0.246 port 10680 ssh2 2020-08-27T18:21:11.450164abusebot-6.cloudsearch.cf sshd[5065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.246 user=root 2020-08-27T18:21:13.256888abusebot-6.cloudsearch.cf sshd[5065]: Failed password for root from 218.92.0.246 port 10680 ssh2 2020-08-27T18:21:16.695229abusebot-6.cloudsearch.cf sshd[5065]: Failed password for root from 218.92.0.246 port 10680 ssh2 2020-08-27T18:21:11.450164abusebot-6.cloudsearch.cf sshd[5065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218. ...	2020-08-28 02:21:33
211.103.222.34	attack	Aug 27 12:07:07 lanister sshd[19835]: Failed password for invalid user git from 211.103.222.34 port 16479 ssh2 Aug 27 12:14:09 lanister sshd[19960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.103.222.34 user=mysql Aug 27 12:14:11 lanister sshd[19960]: Failed password for mysql from 211.103.222.34 port 3465 ssh2 Aug 27 12:22:55 lanister sshd[20063]: Invalid user ftp from 211.103.222.34	2020-08-28 02:07:51
159.65.145.160	attackbots	Unauthorized connection attempt detected, IP banned.	2020-08-28 02:13:37

Recently Reported IPs

101.109.0.106	140.249.55.35	182.135.63.227	182.95.176.176
222.252.45.133	49.233.87.107	77.220.48.163	154.127.255.162
188.165.193.140	58.252.6.76	34.66.124.179	45.124.97.140
14.116.192.199	42.111.200.79	179.35.113.32	75.78.84.249
41.185.31.37	139.101.113.101	1.6.205.39	15.158.181.248