172.105.51.130

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
172.105.51.125	attackspambots	scans once in preceeding hours on the ports (in chronological order) 8545 resulting in total of 10 scans from 172.104.0.0/15 block.	2020-07-06 23:52:14
172.105.51.125	attackbotsspam	TCP (SYN) 172.105.51.125:32767 -> port 8545, len 44	2020-07-06 06:59:08
172.105.51.69	attackbots	[Wed Apr 22 08:19:31 2020] - DDoS Attack From IP: 172.105.51.69 Port: 60489	2020-04-28 07:56:48
172.105.51.239	attackspam	Oct 7 10:03:21 server6 sshd[18757]: Failed password for r.r from 172.105.51.239 port 58962 ssh2 Oct 7 10:03:21 server6 sshd[18757]: Received disconnect from 172.105.51.239: 11: Bye Bye [preauth] Oct 7 10:16:01 server6 sshd[7412]: Failed password for r.r from 172.105.51.239 port 59738 ssh2 Oct 7 10:16:01 server6 sshd[7412]: Received disconnect from 172.105.51.239: 11: Bye Bye [preauth] Oct 7 10:20:24 server6 sshd[22078]: Failed password for r.r from 172.105.51.239 port 44194 ssh2 Oct 7 10:20:24 server6 sshd[22078]: Received disconnect from 172.105.51.239: 11: Bye Bye [preauth] Oct 7 10:24:50 server6 sshd[11273]: Failed password for r.r from 172.105.51.239 port 56878 ssh2 Oct 7 10:24:50 server6 sshd[11273]: Received disconnect from 172.105.51.239: 11: Bye Bye [preauth] Oct 7 10:29:10 server6 sshd[21194]: Failed password for r.r from 172.105.51.239 port 41330 ssh2 Oct 7 10:29:10 server6 sshd[21194]: Received disconnect from 172.105.51.239: 11: Bye Bye [preauth] O........ -------------------------------	2019-10-09 23:30:20
172.105.51.239	attackbotsspam	Oct 9 13:07:54 dedicated sshd[8298]: Invalid user Rapido123 from 172.105.51.239 port 50068	2019-10-09 19:21:41
172.105.51.239	attackspambots	Oct 08 07:01:20 askasleikir sshd[295316]: Failed password for root from 172.105.51.239 port 48574 ssh2	2019-10-09 00:20:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.105.51.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54227
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;172.105.51.130.			IN	A

;; AUTHORITY SECTION:
.			574	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 15:14:52 CST 2022
;; MSG SIZE  rcvd: 107

Host info

130.51.105.172.in-addr.arpa domain name pointer lo9.pwh-r1.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
130.51.105.172.in-addr.arpa	name = lo9.pwh-r1.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
140.86.39.162	attack	Jun 28 20:14:01 Tower sshd[16516]: Connection from 140.86.39.162 port 23102 on 192.168.10.220 port 22 rdomain "" Jun 28 20:14:02 Tower sshd[16516]: Invalid user orlando from 140.86.39.162 port 23102 Jun 28 20:14:02 Tower sshd[16516]: error: Could not get shadow information for NOUSER Jun 28 20:14:02 Tower sshd[16516]: Failed password for invalid user orlando from 140.86.39.162 port 23102 ssh2 Jun 28 20:14:02 Tower sshd[16516]: Received disconnect from 140.86.39.162 port 23102:11: Bye Bye [preauth] Jun 28 20:14:02 Tower sshd[16516]: Disconnected from invalid user orlando 140.86.39.162 port 23102 [preauth]	2020-06-29 08:20:04
188.81.39.123	attack	20772/tcp 8888/tcp... [2020-05-06/06-28]25pkt,2pt.(tcp)	2020-06-29 08:12:35
34.73.136.216	attack	1200. On Jun 28 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 34.73.136.216.	2020-06-29 08:13:21
61.133.232.253	attackspambots	Jun 29 04:58:46 l03 sshd[28733]: Invalid user swapnil from 61.133.232.253 port 46438 ...	2020-06-29 12:01:29
114.188.40.129	attack	Jun 29 00:50:33 piServer sshd[24087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.188.40.129 Jun 29 00:50:35 piServer sshd[24087]: Failed password for invalid user scan from 114.188.40.129 port 62521 ssh2 Jun 29 00:53:54 piServer sshd[24413]: Failed password for root from 114.188.40.129 port 62522 ssh2 ...	2020-06-29 08:41:14
138.197.15.40	attack	Jun 29 01:12:16 pkdns2 sshd\[30690\]: Invalid user ts from 138.197.15.40Jun 29 01:12:18 pkdns2 sshd\[30690\]: Failed password for invalid user ts from 138.197.15.40 port 51528 ssh2Jun 29 01:15:06 pkdns2 sshd\[30847\]: Invalid user miner from 138.197.15.40Jun 29 01:15:07 pkdns2 sshd\[30847\]: Failed password for invalid user miner from 138.197.15.40 port 49080 ssh2Jun 29 01:18:01 pkdns2 sshd\[30954\]: Invalid user friends from 138.197.15.40Jun 29 01:18:03 pkdns2 sshd\[30954\]: Failed password for invalid user friends from 138.197.15.40 port 46646 ssh2 ...	2020-06-29 08:22:18
42.115.68.203	attack	8080/tcp [2020-06-28]1pkt	2020-06-29 08:21:55
138.255.246.137	attackbots	445/tcp 445/tcp [2020-06-28]2pkt	2020-06-29 08:28:19
192.241.226.87	attackbotsspam	143/tcp 83/tcp [2020-06-23/28]2pkt	2020-06-29 08:11:12
192.241.229.69	attack	4331/tcp 3306/tcp [2020-06-23/28]2pkt	2020-06-29 08:19:52
45.40.166.147	attackbotsspam	Automatic report - XMLRPC Attack	2020-06-29 12:04:24
190.74.125.110	attackspambots	445/tcp [2020-06-28]1pkt	2020-06-29 08:40:54
40.68.220.28	attack	Scanned 3 times in the last 24 hours on port 22	2020-06-29 08:32:06
134.209.228.253	attack	Jun 28 23:41:54 IngegnereFirenze sshd[2196]: User root from 134.209.228.253 not allowed because not listed in AllowUsers ...	2020-06-29 08:32:58
124.195.190.171	attackspambots	(imapd) Failed IMAP login from 124.195.190.171 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 29 01:05:23 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=124.195.190.171, lip=5.63.12.44, session=	2020-06-29 08:18:13

Recently Reported IPs

172.105.51.155	172.105.53.131	172.105.55.106	172.105.56.108
172.105.57.246	172.105.58.199	172.105.56.6	172.105.59.239
172.105.62.200	172.105.63.144	172.105.57.79	172.105.53.230
172.105.61.128	172.105.63.212	172.105.57.51	172.105.63.98
172.105.63.88	172.105.74.212	172.105.65.189	172.105.74.43