104.244.74.142

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.244.74.223	attackspam	Sep 26 22:41:53 OPSO sshd\[7410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 user=root Sep 26 22:41:55 OPSO sshd\[7410\]: Failed password for root from 104.244.74.223 port 39220 ssh2 Sep 26 22:41:55 OPSO sshd\[7412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 user=admin Sep 26 22:41:57 OPSO sshd\[7412\]: Failed password for admin from 104.244.74.223 port 41022 ssh2 Sep 26 22:41:58 OPSO sshd\[7416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 user=root	2020-09-27 04:58:33
104.244.74.223	attackbots	TCP (SYN) 104.244.74.223:36692 -> port 22, len 48	2020-09-26 12:52:54
104.244.74.28	attackbotsspam	Sep 20 03:44:25 propaganda sshd[23022]: Connection from 104.244.74.28 port 55042 on 10.0.0.161 port 22 rdomain "" Sep 20 03:44:26 propaganda sshd[23022]: Invalid user admin from 104.244.74.28 port 55042	2020-09-21 02:06:38
104.244.74.28	attack	2020-09-20T07:27:05+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-09-20 18:07:24
104.244.74.223	attackspambots	Invalid user admin from 104.244.74.223 port 46624	2020-09-20 00:56:56
104.244.74.223	attackspam	2020-09-19T08:12:51.934191dmca.cloudsearch.cf sshd[7343]: Invalid user admin from 104.244.74.223 port 47402 2020-09-19T08:12:51.939421dmca.cloudsearch.cf sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 2020-09-19T08:12:51.934191dmca.cloudsearch.cf sshd[7343]: Invalid user admin from 104.244.74.223 port 47402 2020-09-19T08:12:54.215542dmca.cloudsearch.cf sshd[7343]: Failed password for invalid user admin from 104.244.74.223 port 47402 ssh2 2020-09-19T08:12:54.447796dmca.cloudsearch.cf sshd[7345]: Invalid user admin from 104.244.74.223 port 48650 2020-09-19T08:12:54.452658dmca.cloudsearch.cf sshd[7345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 2020-09-19T08:12:54.447796dmca.cloudsearch.cf sshd[7345]: Invalid user admin from 104.244.74.223 port 48650 2020-09-19T08:12:56.472965dmca.cloudsearch.cf sshd[7345]: Failed password for invalid user admin from 104.244.74. ...	2020-09-19 16:44:45
104.244.74.169	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-16 23:56:12
104.244.74.169	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-16T07:33:31Z and 2020-09-16T07:33:34Z	2020-09-16 16:13:07
104.244.74.169	attackbotsspam	Sep 16 01:50:12 mail sshd[32693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169 Sep 16 01:50:14 mail sshd[32693]: Failed password for invalid user admin from 104.244.74.169 port 58212 ssh2 ...	2020-09-16 08:13:26
104.244.74.169	attackspambots	Sep 13 19:00:51 serwer sshd\[26735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169 user=root Sep 13 19:00:53 serwer sshd\[26735\]: Failed password for root from 104.244.74.169 port 48976 ssh2 Sep 13 19:00:56 serwer sshd\[26735\]: Failed password for root from 104.244.74.169 port 48976 ssh2 ...	2020-09-14 02:13:32
104.244.74.169	attackbotsspam	(sshd) Failed SSH login from 104.244.74.169 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 08:14:27 amsweb01 sshd[11989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169 user=root Sep 13 08:14:28 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2 Sep 13 08:14:31 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2 Sep 13 08:14:33 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2 Sep 13 08:14:35 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2	2020-09-13 18:10:39
104.244.74.169	attackbotsspam	SSH Brute Force	2020-09-11 21:46:38
104.244.74.169	attack	2020-09-11T05:52:23.133475server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 2020-09-11T05:52:25.662921server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 2020-09-11T05:52:27.816712server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 2020-09-11T05:52:30.466976server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 ...	2020-09-11 13:54:31
104.244.74.169	attackbotsspam	Dear user, The IP address [104.244.74.169] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Wed Sep 9 15:40:51 2020. From AstroParrotsNAS	2020-09-11 06:06:26
104.244.74.57	attack	(sshd) Failed SSH login from 104.244.74.57 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 9 00:10:33 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:36 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:38 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:41 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:44 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2	2020-09-09 19:43:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.244.74.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 76
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.244.74.142.			IN	A

;; AUTHORITY SECTION:
.			112	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022051902 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 20 12:41:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

142.74.244.104.in-addr.arpa domain name pointer server1.pmlscale.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.74.244.104.in-addr.arpa	name = server1.pmlscale.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.47.146.14	attack	Nov 15 23:58:51 ns382633 sshd\[28369\]: Invalid user pi from 14.47.146.14 port 36536 Nov 15 23:58:51 ns382633 sshd\[28367\]: Invalid user pi from 14.47.146.14 port 57254 Nov 15 23:58:51 ns382633 sshd\[28369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.47.146.14 Nov 15 23:58:51 ns382633 sshd\[28367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.47.146.14 Nov 15 23:58:53 ns382633 sshd\[28369\]: Failed password for invalid user pi from 14.47.146.14 port 36536 ssh2 Nov 15 23:58:53 ns382633 sshd\[28367\]: Failed password for invalid user pi from 14.47.146.14 port 57254 ssh2	2019-11-16 08:26:30
115.88.25.178	attackbots	Nov 16 00:48:29 srv01 sshd[4345]: Invalid user hoesing from 115.88.25.178 Nov 16 00:48:29 srv01 sshd[4345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.88.25.178 Nov 16 00:48:29 srv01 sshd[4345]: Invalid user hoesing from 115.88.25.178 Nov 16 00:48:31 srv01 sshd[4345]: Failed password for invalid user hoesing from 115.88.25.178 port 57168 ssh2 Nov 16 00:52:32 srv01 sshd[4646]: Invalid user rpm from 115.88.25.178 ...	2019-11-16 07:56:13
81.22.45.115	attackbots	Nov 16 00:20:32 h2177944 kernel: \[6735519.876694\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=37917 PROTO=TCP SPT=40293 DPT=1055 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:22:59 h2177944 kernel: \[6735666.327282\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=5139 PROTO=TCP SPT=40293 DPT=944 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:23:33 h2177944 kernel: \[6735700.313829\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14282 PROTO=TCP SPT=40293 DPT=1896 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:24:36 h2177944 kernel: \[6735763.449720\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=58129 PROTO=TCP SPT=40293 DPT=1456 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 16 00:25:57 h2177944 kernel: \[6735844.918841\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.115 DST=85.214.117.9 LEN=40	2019-11-16 08:08:40
222.186.175.167	attackbotsspam	Nov 16 01:23:58 v22018086721571380 sshd[31470]: error: maximum authentication attempts exceeded for root from 222.186.175.167 port 34500 ssh2 [preauth]	2019-11-16 08:24:26
222.186.173.142	attackbots	detected by Fail2Ban	2019-11-16 08:28:09
185.176.27.254	attack	11/15/2019-18:48:16.410078 185.176.27.254 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-16 07:52:12
5.39.88.4	attackspam	Nov 15 12:54:48 sachi sshd\[19295\]: Invalid user cleary from 5.39.88.4 Nov 15 12:54:48 sachi sshd\[19295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3045808.ip-5-39-88.eu Nov 15 12:54:49 sachi sshd\[19295\]: Failed password for invalid user cleary from 5.39.88.4 port 54658 ssh2 Nov 15 12:59:00 sachi sshd\[19608\]: Invalid user apache from 5.39.88.4 Nov 15 12:59:00 sachi sshd\[19608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3045808.ip-5-39-88.eu	2019-11-16 08:15:50
181.174.102.66	attackbots	1433/tcp 445/tcp... [2019-10-18/11-15]6pkt,2pt.(tcp)	2019-11-16 08:25:54
157.119.189.93	attack	Nov 16 04:52:56 gw1 sshd[15064]: Failed password for games from 157.119.189.93 port 49206 ssh2 ...	2019-11-16 08:02:53
198.199.124.109	attackspambots	Nov 13 22:42:39 itv-usvr-01 sshd[29369]: Invalid user debelian from 198.199.124.109 Nov 13 22:42:39 itv-usvr-01 sshd[29369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.124.109 Nov 13 22:42:39 itv-usvr-01 sshd[29369]: Invalid user debelian from 198.199.124.109 Nov 13 22:42:41 itv-usvr-01 sshd[29369]: Failed password for invalid user debelian from 198.199.124.109 port 39986 ssh2 Nov 13 22:50:29 itv-usvr-01 sshd[29667]: Invalid user storace from 198.199.124.109	2019-11-16 08:03:22
154.117.154.62	attackbotsspam	23/tcp 23/tcp 23/tcp... [2019-09-15/11-15]51pkt,1pt.(tcp)	2019-11-16 08:03:57
195.88.66.108	attackbotsspam	Nov 16 01:04:04 vps647732 sshd[21411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.88.66.108 Nov 16 01:04:07 vps647732 sshd[21411]: Failed password for invalid user scann from 195.88.66.108 port 40767 ssh2 ...	2019-11-16 08:06:32
103.27.238.202	attackbots	Nov 15 23:45:24 web8 sshd\[31067\]: Invalid user smg from 103.27.238.202 Nov 15 23:45:24 web8 sshd\[31067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.238.202 Nov 15 23:45:25 web8 sshd\[31067\]: Failed password for invalid user smg from 103.27.238.202 port 51338 ssh2 Nov 15 23:51:17 web8 sshd\[1672\]: Invalid user apache from 103.27.238.202 Nov 15 23:51:17 web8 sshd\[1672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.238.202	2019-11-16 07:52:37
200.0.236.210	attack	Nov 11 16:26:24 itv-usvr-01 sshd[19915]: Invalid user leemhuis from 200.0.236.210 Nov 11 16:26:24 itv-usvr-01 sshd[19915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.0.236.210 Nov 11 16:26:24 itv-usvr-01 sshd[19915]: Invalid user leemhuis from 200.0.236.210 Nov 11 16:26:25 itv-usvr-01 sshd[19915]: Failed password for invalid user leemhuis from 200.0.236.210 port 53434 ssh2 Nov 11 16:31:09 itv-usvr-01 sshd[20092]: Invalid user smmsp from 200.0.236.210	2019-11-16 08:00:53
201.66.230.67	attackspambots	Nov 15 19:00:44 : SSH login attempts with invalid user	2019-11-16 07:51:48

Recently Reported IPs

104.244.102.216	104.247.212.204	104.248.1.84	104.248.100.6
104.248.101.142	120.26.95.127	104.248.111.68	104.248.117.173
104.248.12.65	104.248.122.121	232.30.254.147	185.192.137.12
104.248.128.77	104.248.132.126	104.248.132.208	3.230.250.211
58.253.5.5	104.25.219.132	104.25.22.98	104.25.220.0