104.162.57.111

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Charter Communications Inc

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 104.162.57.111 to port 81 [J]	2020-03-02 04:12:59
attackspam	Fail2Ban Ban Triggered	2020-02-17 04:55:41
attackspam	Automatic report - Port Scan Attack	2019-09-24 16:03:12

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.162.57.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.162.57.111.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092400 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 24 16:03:08 CST 2019
;; MSG SIZE  rcvd: 118

Host info

111.57.162.104.in-addr.arpa domain name pointer cpe-104-162-57-111.nyc.res.rr.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
111.57.162.104.in-addr.arpa	name = cpe-104-162-57-111.nyc.res.rr.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.156.24.79	attack	Sep 2 01:33:51 [host] sshd[18728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.79 user=root Sep 2 01:33:53 [host] sshd[18728]: Failed password for root from 36.156.24.79 port 54570 ssh2 Sep 2 01:34:10 [host] sshd[18730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.79 user=root	2019-09-02 07:37:07
212.83.163.238	attackspambots	\[2019-09-02 01:29:04\] NOTICE\[18654\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '212.83.163.238:1917' \(callid: 1985614558-326023871-24341043\) - Failed to authenticate \[2019-09-02 01:29:04\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-09-02T01:29:04.759+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1985614558-326023871-24341043",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/212.83.163.238/1917",Challenge="1567380544/a713fe1f42414a9a9c99fbe4b28b91e5",Response="e68292b7963f07354355772d5f6f4818",ExpectedResponse="" \[2019-09-02 01:29:04\] NOTICE\[3217\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '212.83.163.238:1917' \(callid: 1985614558-326023871-24341043\) - Failed to authenticate \[2019-09-02 01:29:04\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResp	2019-09-02 08:02:29
218.215.188.167	attackspam	Sep 1 21:50:04 localhost sshd\[14337\]: Invalid user super@123 from 218.215.188.167 port 57818 Sep 1 21:50:04 localhost sshd\[14337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.215.188.167 Sep 1 21:50:06 localhost sshd\[14337\]: Failed password for invalid user super@123 from 218.215.188.167 port 57818 ssh2 Sep 1 21:58:35 localhost sshd\[14566\]: Invalid user 123456 from 218.215.188.167 port 43394 Sep 1 21:58:35 localhost sshd\[14566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.215.188.167 ...	2019-09-02 07:43:32
106.12.75.175	attackbots	Sep 2 01:43:52 server sshd\[18658\]: User root from 106.12.75.175 not allowed because listed in DenyUsers Sep 2 01:43:52 server sshd\[18658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.75.175 user=root Sep 2 01:43:54 server sshd\[18658\]: Failed password for invalid user root from 106.12.75.175 port 37532 ssh2 Sep 2 01:53:42 server sshd\[9841\]: Invalid user archiva from 106.12.75.175 port 45254 Sep 2 01:53:42 server sshd\[9841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.75.175	2019-09-02 07:33:00
109.200.159.230	attackbots	[portscan] Port scan	2019-09-02 07:50:43
120.132.61.80	attackspam	Sep 2 00:34:15 mail sshd\[32478\]: Invalid user peewee from 120.132.61.80 port 54662 Sep 2 00:34:15 mail sshd\[32478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.61.80 ...	2019-09-02 07:44:54
174.223.9.87	attackspambots	Chat Spam	2019-09-02 08:09:05
180.87.236.202	attackspambots	Sep 1 20:34:40 vps691689 sshd[24102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.87.236.202 Sep 1 20:34:42 vps691689 sshd[24102]: Failed password for invalid user rafal from 180.87.236.202 port 47606 ssh2 ...	2019-09-02 07:37:40
168.227.91.169	attackspambots	SSH Brute Force, server-1 sshd[7252]: Failed password for invalid user john from 168.227.91.169 port 13431 ssh2	2019-09-02 07:36:06
98.143.148.45	attackbotsspam	Sep 1 21:07:21 dedicated sshd[13251]: Invalid user adelia from 98.143.148.45 port 51026	2019-09-02 07:54:32
92.118.37.82	attackbotsspam	Sep 2 02:03:09 h2177944 kernel: \[259250.707362\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=12776 PROTO=TCP SPT=55326 DPT=25309 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:03:20 h2177944 kernel: \[259261.746723\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=59440 PROTO=TCP SPT=55326 DPT=28599 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:04:22 h2177944 kernel: \[259324.084524\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=9335 PROTO=TCP SPT=55326 DPT=26581 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:06:57 h2177944 kernel: \[259478.739938\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=43128 PROTO=TCP SPT=55326 DPT=22328 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:07:05 h2177944 kernel: \[259487.593435\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40	2019-09-02 08:10:44
62.28.140.233	attack	2019-09-01T22:44:49Z - RDP login failed multiple times. (62.28.140.233)	2019-09-02 08:16:57
178.128.87.245	attackbotsspam	2019-09-01T22:52:55.150717hub.schaetter.us sshd\[13775\]: Invalid user ralph from 178.128.87.245 2019-09-01T22:52:55.185706hub.schaetter.us sshd\[13775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.87.245 2019-09-01T22:52:56.894790hub.schaetter.us sshd\[13775\]: Failed password for invalid user ralph from 178.128.87.245 port 41266 ssh2 2019-09-01T23:01:00.448002hub.schaetter.us sshd\[13823\]: Invalid user ww from 178.128.87.245 2019-09-01T23:01:00.479897hub.schaetter.us sshd\[13823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.87.245 ...	2019-09-02 07:48:47
34.68.214.219	attackbotsspam	Forged login request.	2019-09-02 07:35:15
95.163.82.25	attackspambots	SpamReport	2019-09-02 07:46:07

Recently Reported IPs

103.79.143.113	186.212.190.28	112.26.149.232	37.215.120.73
172.96.191.13	177.11.44.10	212.150.112.76	183.239.203.40
177.189.207.177	87.236.20.17	84.15.143.63	134.209.252.119
200.201.217.104	218.247.254.162	81.17.27.141	35.196.238.16
41.34.8.248	116.92.211.233	95.9.139.212	222.190.132.82