96.82.74.134 - IPInfo

Basic Info

City: Cupertino

Region: California

Country: United States

Internet Service Provider: Comcast Cable Communications LLC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	May 3 13:57:04 mail.srvfarm.net postfix/smtpd[2548597]: NOQUEUE: reject: RCPT from 96-82-74-134-static.hfc.comcastbusiness.net[96.82.74.134]: 554 5.7.1 Service unavailable; Client host [96.82.74.134] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?96.82.74.134; from= to= proto=ESMTP helo=<96-82-74-129-static.hfc.comcastbusiness.net> May 3 13:57:09 mail.srvfarm.net postfix/smtpd[2548597]: NOQUEUE: reject: RCPT from 96-82-74-134-static.hfc.comcastbusiness.net[96.82.74.134]: 554 5.7.1 Service unavailable; Client host [96.82.74.134] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?96.82.74.134; from= to= proto=ESMTP helo=<96-82-74-129-static.hfc.comcastbusiness.net> May 3 13:57:15 mail.srvfarm.net postfix/smtpd[2548597]: NOQUEUE: reject: RCPT from 96-82-74-134-static.hfc.comcastbusiness.net[96.82.74.134]: 554 5.7.1 Service unavailable; C	2020-05-04 03:45:13
attackbots	spam	2020-04-06 13:48:31
attackbots	email spam	2019-12-19 21:36:19
attackbotsspam	Automatic report - Banned IP Access	2019-11-18 01:54:34
attackbots	Absender hat Spam-Falle ausgel?st	2019-11-08 21:57:33
attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-09-11 02:13:37

Comments on same subnet:

IP	Type	Details	Datetime
96.82.74.129	attack	spam	2020-03-01 19:15:24
96.82.74.129	attackspam	proto=tcp . spt=52367 . dpt=25 . Found on Dark List de (456)	2020-01-26 00:30:46
96.82.74.129	attack	spam	2020-01-24 18:38:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.82.74.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60246
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;96.82.74.134.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 02:13:29 CST 2019
;; MSG SIZE  rcvd: 116

Host info

134.74.82.96.in-addr.arpa domain name pointer 96-82-74-134-static.hfc.comcastbusiness.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
134.74.82.96.in-addr.arpa	name = 96-82-74-134-static.hfc.comcastbusiness.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.128.246.123	attackspam	Nov 22 17:46:51 OPSO sshd\[16522\]: Invalid user morris from 178.128.246.123 port 47794 Nov 22 17:46:51 OPSO sshd\[16522\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.246.123 Nov 22 17:46:53 OPSO sshd\[16522\]: Failed password for invalid user morris from 178.128.246.123 port 47794 ssh2 Nov 22 17:50:22 OPSO sshd\[17123\]: Invalid user qwer123 from 178.128.246.123 port 55378 Nov 22 17:50:22 OPSO sshd\[17123\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.246.123	2019-11-23 00:54:00
43.226.124.33	attack	11/22/2019-09:49:56.147779 43.226.124.33 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-11-23 01:17:59
209.127.0.11	attackbotsspam	Spam	2019-11-23 00:52:58
104.154.245.23	attackbots	WordPress login Brute force / Web App Attack on client site.	2019-11-23 00:50:35
49.88.112.116	attackbotsspam	Nov 22 17:42:06 localhost sshd\[6167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Nov 22 17:42:07 localhost sshd\[6167\]: Failed password for root from 49.88.112.116 port 25117 ssh2 Nov 22 17:42:10 localhost sshd\[6167\]: Failed password for root from 49.88.112.116 port 25117 ssh2	2019-11-23 00:44:07
103.250.36.113	attackspambots	SSH Brute-Force attacks	2019-11-23 01:22:26
51.75.19.175	attackspambots	Nov 22 13:59:49 firewall sshd[16060]: Failed password for invalid user edu from 51.75.19.175 port 37648 ssh2 Nov 22 14:03:24 firewall sshd[16139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.19.175 user=root Nov 22 14:03:26 firewall sshd[16139]: Failed password for root from 51.75.19.175 port 46896 ssh2 ...	2019-11-23 01:13:13
111.4.120.225	attackbotsspam	firewall-block, port(s): 1433/tcp	2019-11-23 01:07:16
104.200.110.191	attackbotsspam	$f2bV_matches	2019-11-23 00:42:06
106.56.90.102	attackspambots	badbot	2019-11-23 01:18:50
73.109.11.25	attackbots	SSHScan	2019-11-23 00:48:56
185.88.152.64	attack	Automatic report - XMLRPC Attack	2019-11-23 00:47:31
196.200.181.6	attackbots	Spam	2019-11-23 00:53:17
27.223.89.238	attack	SSH brute-force: detected 6 distinct usernames within a 24-hour window.	2019-11-23 01:04:40
222.186.180.147	attack	Nov 22 17:41:07 tux-35-217 sshd\[12476\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147 user=root Nov 22 17:41:08 tux-35-217 sshd\[12476\]: Failed password for root from 222.186.180.147 port 42750 ssh2 Nov 22 17:41:12 tux-35-217 sshd\[12476\]: Failed password for root from 222.186.180.147 port 42750 ssh2 Nov 22 17:41:16 tux-35-217 sshd\[12476\]: Failed password for root from 222.186.180.147 port 42750 ssh2 ...	2019-11-23 00:42:50

Recently Reported IPs

46.181.247.27	115.34.237.128	5.178.63.61	94.137.161.233
89.84.181.0	85.138.232.236	210.161.29.107	217.122.213.98
91.128.237.243	113.103.190.58	131.108.246.80	196.64.79.160
178.57.117.212	198.37.29.93	111.18.97.101	102.48.91.159
151.28.111.20	217.12.113.142	21.56.242.208	80.56.54.51