107.22.195.104

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
107.22.195.49	attackspam	Jul304:09:07server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.50LEN=64TOS=0x00PREC=0x00TTL=220ID=32027PROTO=TCPSPT=40428DPT=8082WINDOW=43521RES=0x00SYNURGP=0Jul304:09:11server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.57LEN=64TOS=0x00PREC=0x00TTL=221ID=28585PROTO=TCPSPT=40428DPT=8002WINDOW=43521RES=0x00SYNURGP=0Jul304:09:21server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.57LEN=64TOS=0x00PREC=0x00TTL=227ID=25328PROTO=TCPSPT=40428DPT=8082WINDOW=43521RES=0x00SYNURGP=0Jul304:09:23server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.53LEN=64TOS=0x00PREC=0x00TTL=220ID=44454PROTO=TCPSPT=40428DPT=8083WINDOW=43521RES=0x00SYNURGP=0Jul304:09:31server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7	2020-07-03 22:50:46
107.22.195.49	attackbotsspam	nginx/IPasHostname/a4a6f	2020-06-10 13:56:06

Type

Details

Datetime

107.22.195.49

attackspam

Jul304:09:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.50LEN=64TOS=0x00PREC=0x00TTL=220ID=32027PROTO=TCPSPT=40428DPT=8082WINDOW=43521RES=0x00SYNURGP=0Jul304:09:11server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.57LEN=64TOS=0x00PREC=0x00TTL=221ID=28585PROTO=TCPSPT=40428DPT=8002WINDOW=43521RES=0x00SYNURGP=0Jul304:09:21server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.57LEN=64TOS=0x00PREC=0x00TTL=227ID=25328PROTO=TCPSPT=40428DPT=8082WINDOW=43521RES=0x00SYNURGP=0Jul304:09:23server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=107.22.195.49DST=136.243.224.53LEN=64TOS=0x00PREC=0x00TTL=220ID=44454PROTO=TCPSPT=40428DPT=8083WINDOW=43521RES=0x00SYNURGP=0Jul304:09:31server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7

2020-07-03 22:50:46

107.22.195.49

attackbotsspam

nginx/IPasHostname/a4a6f

2020-06-10 13:56:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.22.195.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53959
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;107.22.195.104.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 05:26:56 CST 2022
;; MSG SIZE  rcvd: 107

Host info

104.195.22.107.in-addr.arpa domain name pointer ec2-107-22-195-104.compute-1.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.195.22.107.in-addr.arpa	name = ec2-107-22-195-104.compute-1.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.154	attack	Jul 23 08:41:47 localhost sshd[12810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Jul 23 08:41:49 localhost sshd[12810]: Failed password for root from 222.186.175.154 port 18424 ssh2 Jul 23 08:41:53 localhost sshd[12810]: Failed password for root from 222.186.175.154 port 18424 ssh2 Jul 23 08:41:47 localhost sshd[12810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Jul 23 08:41:49 localhost sshd[12810]: Failed password for root from 222.186.175.154 port 18424 ssh2 Jul 23 08:41:53 localhost sshd[12810]: Failed password for root from 222.186.175.154 port 18424 ssh2 Jul 23 08:41:47 localhost sshd[12810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Jul 23 08:41:49 localhost sshd[12810]: Failed password for root from 222.186.175.154 port 18424 ssh2 Jul 23 08:41:53 localhost sshd[12 ...	2020-07-23 16:42:14
222.186.175.148	attackbotsspam	2020-07-23T08:19:27.230529abusebot-8.cloudsearch.cf sshd[21661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148 user=root 2020-07-23T08:19:28.720917abusebot-8.cloudsearch.cf sshd[21661]: Failed password for root from 222.186.175.148 port 56496 ssh2 2020-07-23T08:19:31.708720abusebot-8.cloudsearch.cf sshd[21661]: Failed password for root from 222.186.175.148 port 56496 ssh2 2020-07-23T08:19:27.230529abusebot-8.cloudsearch.cf sshd[21661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148 user=root 2020-07-23T08:19:28.720917abusebot-8.cloudsearch.cf sshd[21661]: Failed password for root from 222.186.175.148 port 56496 ssh2 2020-07-23T08:19:31.708720abusebot-8.cloudsearch.cf sshd[21661]: Failed password for root from 222.186.175.148 port 56496 ssh2 2020-07-23T08:19:27.230529abusebot-8.cloudsearch.cf sshd[21661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...	2020-07-23 16:55:26
182.61.46.245	attack	Jul 23 06:08:30 ip-172-31-62-245 sshd\[18988\]: Invalid user postgres from 182.61.46.245\ Jul 23 06:08:32 ip-172-31-62-245 sshd\[18988\]: Failed password for invalid user postgres from 182.61.46.245 port 40984 ssh2\ Jul 23 06:10:29 ip-172-31-62-245 sshd\[19070\]: Invalid user natalia from 182.61.46.245\ Jul 23 06:10:32 ip-172-31-62-245 sshd\[19070\]: Failed password for invalid user natalia from 182.61.46.245 port 32814 ssh2\ Jul 23 06:12:19 ip-172-31-62-245 sshd\[19104\]: Invalid user developer from 182.61.46.245\	2020-07-23 16:44:04
128.199.149.111	attackbotsspam	Invalid user office from 128.199.149.111 port 45482	2020-07-23 16:13:43
123.207.92.254	attackspambots	Failed password for invalid user caulax from 123.207.92.254 port 37752 ssh2	2020-07-23 16:26:41
175.145.232.73	attackspambots	Jul 23 11:05:20 hosting sshd[16282]: Invalid user alistair from 175.145.232.73 port 53540 ...	2020-07-23 16:54:08
210.13.111.26	attackspambots	Invalid user ph from 210.13.111.26 port 44961	2020-07-23 16:27:26
115.84.92.15	attackspambots	(imapd) Failed IMAP login from 115.84.92.15 (LA/Laos/-): 1 in the last 3600 secs	2020-07-23 16:45:22
112.85.42.187	attackspam	Jul 23 10:14:29 ift sshd\[1168\]: Failed password for root from 112.85.42.187 port 31793 ssh2Jul 23 10:16:17 ift sshd\[1586\]: Failed password for root from 112.85.42.187 port 13408 ssh2Jul 23 10:16:19 ift sshd\[1586\]: Failed password for root from 112.85.42.187 port 13408 ssh2Jul 23 10:16:21 ift sshd\[1586\]: Failed password for root from 112.85.42.187 port 13408 ssh2Jul 23 10:19:59 ift sshd\[2109\]: Failed password for root from 112.85.42.187 port 24349 ssh2 ...	2020-07-23 16:34:14
46.97.186.242	attackbots	Automatic report - Port Scan Attack	2020-07-23 16:43:30
106.75.181.119	attack	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-07-23 16:49:16
212.83.132.45	attackspambots	[2020-07-23 04:42:48] NOTICE[1277] chan_sip.c: Registration from '"444"' failed for '212.83.132.45:8470' - Wrong password [2020-07-23 04:42:48] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-23T04:42:48.123-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="444",SessionID="0x7f17545b1d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132.45/8470",Challenge="407fe586",ReceivedChallenge="407fe586",ReceivedHash="3c840aeefc5861ddfe279a42a1226403" [2020-07-23 04:48:41] NOTICE[1277] chan_sip.c: Registration from '"445"' failed for '212.83.132.45:8534' - Wrong password [2020-07-23 04:48:41] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-23T04:48:41.456-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="445",SessionID="0x7f17542ea028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132 ...	2020-07-23 16:50:30
49.234.53.83	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-07-23 16:29:38
83.97.20.234	attackspambots	Automatic Fail2ban report - Trying login SSH	2020-07-23 16:51:23
45.145.67.143	attack	TCP (SYN) 45.145.67.143:52219 -> port 1990, len 44	2020-07-23 16:20:42

Recently Reported IPs

107.22.194.47	107.22.195.24	107.22.20.9	107.22.214.105
107.22.214.65	107.22.221.148	107.22.195.31	107.22.218.231
107.22.196.210	107.22.221.174	107.22.225.160	107.22.230.248
107.22.232.103	107.22.233.195	107.22.233.62	107.22.242.170
107.22.25.2	107.22.239.13	107.22.247.231	107.22.238.62