24.130.199.58 - IPInfo

Basic Info

City: San Jose

Region: California

Country: United States

Internet Service Provider: Comcast Cable Communications LLC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	SSH brute force	2020-07-22 23:53:25
attackspambots	Jun 29 07:43:04 garuda sshd[680535]: Invalid user admin from 24.130.199.58 Jun 29 07:43:04 garuda sshd[680535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-130-199-58.hsd1.ca.comcast.net Jun 29 07:43:06 garuda sshd[680535]: Failed password for invalid user admin from 24.130.199.58 port 45488 ssh2 Jun 29 07:43:06 garuda sshd[680535]: Received disconnect from 24.130.199.58: 11: Bye Bye [preauth] Jun 29 07:43:08 garuda sshd[680542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-130-199-58.hsd1.ca.comcast.net user=r.r Jun 29 07:43:09 garuda sshd[680542]: Failed password for r.r from 24.130.199.58 port 45809 ssh2 Jun 29 07:43:09 garuda sshd[680542]: Received disconnect from 24.130.199.58: 11: Bye Bye [preauth] Jun 29 07:43:11 garuda sshd[680548]: Invalid user admin from 24.130.199.58 Jun 29 07:43:11 garuda sshd[680548]: pam_unix(sshd:auth): authentication failure; logname= uid=0........ -------------------------------	2020-07-06 07:55:38

Type

Details

Datetime

attack

SSH brute force

2020-07-22 23:53:25

attackspambots

Jun 29 07:43:04 garuda sshd[680535]: Invalid user admin from 24.130.199.58
Jun 29 07:43:04 garuda sshd[680535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-130-199-58.hsd1.ca.comcast.net 
Jun 29 07:43:06 garuda sshd[680535]: Failed password for invalid user admin from 24.130.199.58 port 45488 ssh2
Jun 29 07:43:06 garuda sshd[680535]: Received disconnect from 24.130.199.58: 11: Bye Bye [preauth]
Jun 29 07:43:08 garuda sshd[680542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-130-199-58.hsd1.ca.comcast.net  user=r.r
Jun 29 07:43:09 garuda sshd[680542]: Failed password for r.r from 24.130.199.58 port 45809 ssh2
Jun 29 07:43:09 garuda sshd[680542]: Received disconnect from 24.130.199.58: 11: Bye Bye [preauth]
Jun 29 07:43:11 garuda sshd[680548]: Invalid user admin from 24.130.199.58
Jun 29 07:43:11 garuda sshd[680548]: pam_unix(sshd:auth): authentication failure; logname= uid=0........
-------------------------------

2020-07-06 07:55:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 24.130.199.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3367
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;24.130.199.58.			IN	A

;; AUTHORITY SECTION:
.			369	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070501 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 06 07:55:35 CST 2020
;; MSG SIZE  rcvd: 117

Host info

58.199.130.24.in-addr.arpa domain name pointer c-24-130-199-58.hsd1.ca.comcast.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
58.199.130.24.in-addr.arpa	name = c-24-130-199-58.hsd1.ca.comcast.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.172.102.74	attackspam	SSH brute-force: detected 21 distinct usernames within a 24-hour window.	2020-05-06 23:01:17
104.236.47.37	attack	May 6 12:54:53 game-panel sshd[26133]: Failed password for root from 104.236.47.37 port 36338 ssh2 May 6 12:57:41 game-panel sshd[26257]: Failed password for root from 104.236.47.37 port 51228 ssh2	2020-05-06 23:20:17
223.197.171.233	attack	Unauthorized connection attempt from IP address 223.197.171.233 on Port 445(SMB)	2020-05-06 22:57:31
51.77.144.50	attack	Repeated brute force against a port	2020-05-06 23:08:23
129.144.181.142	attackspambots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-05-06 22:56:06
162.243.139.127	attackbots	SMB Server BruteForce Attack	2020-05-06 22:57:53
193.194.83.59	attackbotsspam	Unauthorized connection attempt from IP address 193.194.83.59 on Port 445(SMB)	2020-05-06 23:23:37
14.251.74.240	attackspam	Unauthorized connection attempt from IP address 14.251.74.240 on Port 445(SMB)	2020-05-06 22:59:55
125.161.107.154	attackbotsspam	20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154 20/5/6@08:00:31: FAIL: Alarm-Network address from=125.161.107.154 ...	2020-05-06 23:13:15
139.59.69.76	attackbots	May 6 15:13:13 host sshd[4491]: Invalid user steam from 139.59.69.76 port 57012 ...	2020-05-06 22:41:30
139.99.219.208	attackspambots	May 6 14:13:59 srv-ubuntu-dev3 sshd[14021]: Invalid user globalflash from 139.99.219.208 May 6 14:13:59 srv-ubuntu-dev3 sshd[14021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.219.208 May 6 14:13:59 srv-ubuntu-dev3 sshd[14021]: Invalid user globalflash from 139.99.219.208 May 6 14:14:02 srv-ubuntu-dev3 sshd[14021]: Failed password for invalid user globalflash from 139.99.219.208 port 38311 ssh2 May 6 14:18:46 srv-ubuntu-dev3 sshd[14829]: Invalid user stagiaire from 139.99.219.208 May 6 14:18:46 srv-ubuntu-dev3 sshd[14829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.219.208 May 6 14:18:46 srv-ubuntu-dev3 sshd[14829]: Invalid user stagiaire from 139.99.219.208 May 6 14:18:48 srv-ubuntu-dev3 sshd[14829]: Failed password for invalid user stagiaire from 139.99.219.208 port 42192 ssh2 May 6 14:23:32 srv-ubuntu-dev3 sshd[15536]: Invalid user pjk from 139.99.219.208 ...	2020-05-06 23:28:13
45.146.254.110	attackbotsspam	SSH brute-force: detected 8 distinct usernames within a 24-hour window.	2020-05-06 23:04:30
177.84.88.66	attack	Unauthorized connection attempt from IP address 177.84.88.66 on Port 445(SMB)	2020-05-06 23:17:14
5.135.164.227	attackbots	May 6 14:00:50 ncomp sshd[30518]: Invalid user mico from 5.135.164.227 May 6 14:00:50 ncomp sshd[30518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.164.227 May 6 14:00:50 ncomp sshd[30518]: Invalid user mico from 5.135.164.227 May 6 14:00:52 ncomp sshd[30518]: Failed password for invalid user mico from 5.135.164.227 port 56575 ssh2	2020-05-06 22:43:44
78.22.32.82	attackbotsspam	May 6 16:06:23 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 6 16:06:28 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 6 16:06:39 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 6 16:06:49 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 6 16:06:49 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= ...	2020-05-06 22:51:57

Recently Reported IPs

176.181.243.137	121.254.51.182	99.138.139.80	220.50.128.132
161.77.58.249	182.71.87.109	196.71.161.243	46.131.252.234
113.42.155.251	74.141.145.127	86.178.100.92	64.189.49.68
71.246.155.178	89.10.159.226	158.150.82.101	185.96.23.168
86.21.253.61	192.241.226.94	110.242.237.216	82.36.61.53