AbuseIPDB » 131.106.31.52

131.106.31.52 was found in our database!

This IP was reported 3,832 times. Confidence of Abuse is 100%: ?

100%

ISP	RCN
Usage Type	Fixed Line ISP
ASN	AS6079
Hostname(s)	131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com
Domain Name	astound.com
Country	United States of America
City	Easton, Pennsylvania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 131.106.31.52

Whois 131.106.31.52

IP Abuse Reports for 131.106.31.52:

This IP address has been reported a total of 3,832 times from 373 distinct sources. 131.106.31.52 was first reported on March 7th 2024, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
dwmp	2024-04-14 23:03:24 (8 months ago)	Apr 14 22:53:21 webcore postfix/smtpd[3478838]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.p ... show moreApr 14 22:53:21 webcore postfix/smtpd[3478838]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: authentication failure Apr 14 23:06:29 webcore postfix/smtpd[3483660]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: authentication failure Apr 15 01:03:24 webcore postfix/smtpd[3506733]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
openstrike.co.uk	2024-04-14 22:51:41 (8 months ago)	SMTP auth failures (1)	Brute-Force
M Bryant	2024-04-14 20:56:49 (9 months ago)	Brute force/Password spray attempts coming from this IP	Hacking
Gateway_NOC	2024-04-14 20:42:35 (9 months ago)	postfix brute force sasl attack	Brute-Force
adlp.org	2024-04-14 18:12:27 (9 months ago)	Apr 14 18:12:20 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;131.106.31.52;[UNAVAILABLE ... show moreApr 14 18:12:20 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;131.106.31.52;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Apr 14 18:12:23 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;131.106.31.52;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Apr 14 18:12:26 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;131.106.31.52;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
TZNOC	2024-04-14 16:22:03 (9 months ago)	Mail credential brute-force attack (SM5) #4	Email Spam Brute-Force
Hirte	2024-04-14 14:44:33 (9 months ago)	LT: Brutforce SMTP Login	Brute-Force
Anonymous	2024-04-14 13:06:28 (9 months ago)	Apr 3 17:17:51 mail postfix/smtpd[16169]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cab ... show moreApr 3 17:17:51 mail postfix/smtpd[16169]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: authentication failure Apr 11 23:09:32 mail postfix/smtpd[29564]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL CRAM-MD5 authentication failed: authentication failure Apr 14 15:06:27 mail postfix/smtpd[21429]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: authentication failure ... show less	Hacking Brute-Force
lavnet.net	2024-04-14 11:14:42 (9 months ago)	Apr 14 11:14:41 angela postfix/submission/smtpd[233261]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5. ... show moreApr 14 11:14:41 angela postfix/submission/smtpd[233261]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, [email protected] Apr 14 11:14:42 angela postfix/submission/smtpd[233261]: lost connection after AUTH from 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52] Apr 14 11:14:42 angela postfix/submission/smtpd[233261]: disconnect from 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force Web App Attack
MakselPr	2024-04-14 10:59:16 (9 months ago)	Apr 14 13:55:43 mail postfix/smtpd[289717]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.ca ... show moreApr 14 13:55:43 mail postfix/smtpd[289717]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, sasl_username=wsparci Apr 14 13:59:16 mail postfix/smtpd[289760]: warning: 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com[131.106.31.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, [email protected] ... show less	Brute-Force
Swiptly	2024-04-14 09:55:40 (9 months ago)	Exim Login attempts ...	Email Spam Brute-Force
lintelcorpo	2024-04-14 09:01:25 (9 months ago)	Yesterday, this IP was the source of 7 failed authentications targeting 7 unique usernames on our Ma ... show moreYesterday, this IP was the source of 7 failed authentications targeting 7 unique usernames on our Mail Server. show less	Brute-Force
dd3589	2024-04-14 05:12:04 (9 months ago)	2024-04-14T07:11:17+02:00 <masked> exim[572392]: fixed_login authenticator failed for 131-106-31-52. ... show more2024-04-14T07:11:17+02:00 <masked> exim[572392]: fixed_login authenticator failed for 131-106-31-52.s1842.c3-0.eas-cbr5.atw-eas.pa.cable.rcncustomer.com [131.106.31.52]: 535 Incorrect authentication data (set_id=adam) show less	Brute-Force
mangomad	2024-04-14 04:21:22 (9 months ago)	Repeated failed SMTP AUTH connections	Brute-Force
Anonymous	2024-04-14 03:19:33 (9 months ago)	IMAP password guessing	Brute-Force