104.244.74.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.244.74.223	attackspam	Sep 26 22:41:53 OPSO sshd\[7410\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 user=root Sep 26 22:41:55 OPSO sshd\[7410\]: Failed password for root from 104.244.74.223 port 39220 ssh2 Sep 26 22:41:55 OPSO sshd\[7412\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 user=admin Sep 26 22:41:57 OPSO sshd\[7412\]: Failed password for admin from 104.244.74.223 port 41022 ssh2 Sep 26 22:41:58 OPSO sshd\[7416\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 user=root	2020-09-27 04:58:33
104.244.74.223	attackbots	TCP (SYN) 104.244.74.223:36692 -> port 22, len 48	2020-09-26 12:52:54
104.244.74.28	attackbotsspam	Sep 20 03:44:25 propaganda sshd[23022]: Connection from 104.244.74.28 port 55042 on 10.0.0.161 port 22 rdomain "" Sep 20 03:44:26 propaganda sshd[23022]: Invalid user admin from 104.244.74.28 port 55042	2020-09-21 02:06:38
104.244.74.28	attack	2020-09-20T07:27:05+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-09-20 18:07:24
104.244.74.223	attackspambots	Invalid user admin from 104.244.74.223 port 46624	2020-09-20 00:56:56
104.244.74.223	attackspam	2020-09-19T08:12:51.934191dmca.cloudsearch.cf sshd[7343]: Invalid user admin from 104.244.74.223 port 47402 2020-09-19T08:12:51.939421dmca.cloudsearch.cf sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 2020-09-19T08:12:51.934191dmca.cloudsearch.cf sshd[7343]: Invalid user admin from 104.244.74.223 port 47402 2020-09-19T08:12:54.215542dmca.cloudsearch.cf sshd[7343]: Failed password for invalid user admin from 104.244.74.223 port 47402 ssh2 2020-09-19T08:12:54.447796dmca.cloudsearch.cf sshd[7345]: Invalid user admin from 104.244.74.223 port 48650 2020-09-19T08:12:54.452658dmca.cloudsearch.cf sshd[7345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.223 2020-09-19T08:12:54.447796dmca.cloudsearch.cf sshd[7345]: Invalid user admin from 104.244.74.223 port 48650 2020-09-19T08:12:56.472965dmca.cloudsearch.cf sshd[7345]: Failed password for invalid user admin from 104.244.74. ...	2020-09-19 16:44:45
104.244.74.169	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-16 23:56:12
104.244.74.169	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-16T07:33:31Z and 2020-09-16T07:33:34Z	2020-09-16 16:13:07
104.244.74.169	attackbotsspam	Sep 16 01:50:12 mail sshd[32693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169 Sep 16 01:50:14 mail sshd[32693]: Failed password for invalid user admin from 104.244.74.169 port 58212 ssh2 ...	2020-09-16 08:13:26
104.244.74.169	attackspambots	Sep 13 19:00:51 serwer sshd\[26735\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169 user=root Sep 13 19:00:53 serwer sshd\[26735\]: Failed password for root from 104.244.74.169 port 48976 ssh2 Sep 13 19:00:56 serwer sshd\[26735\]: Failed password for root from 104.244.74.169 port 48976 ssh2 ...	2020-09-14 02:13:32
104.244.74.169	attackbotsspam	(sshd) Failed SSH login from 104.244.74.169 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 08:14:27 amsweb01 sshd[11989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.74.169 user=root Sep 13 08:14:28 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2 Sep 13 08:14:31 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2 Sep 13 08:14:33 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2 Sep 13 08:14:35 amsweb01 sshd[11989]: Failed password for root from 104.244.74.169 port 38474 ssh2	2020-09-13 18:10:39
104.244.74.169	attackbotsspam	SSH Brute Force	2020-09-11 21:46:38
104.244.74.169	attack	2020-09-11T05:52:23.133475server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 2020-09-11T05:52:25.662921server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 2020-09-11T05:52:27.816712server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 2020-09-11T05:52:30.466976server.espacesoutien.com sshd[3375]: Failed password for root from 104.244.74.169 port 55944 ssh2 ...	2020-09-11 13:54:31
104.244.74.169	attackbotsspam	Dear user, The IP address [104.244.74.169] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Wed Sep 9 15:40:51 2020. From AstroParrotsNAS	2020-09-11 06:06:26
104.244.74.57	attack	(sshd) Failed SSH login from 104.244.74.57 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 9 00:10:33 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:36 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:38 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:41 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2 Sep 9 00:10:44 server4 sshd[17193]: Failed password for root from 104.244.74.57 port 59308 ssh2	2020-09-09 19:43:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.244.74.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41390
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.244.74.55.			IN	A

;; AUTHORITY SECTION:
.			219	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:22:13 CST 2022
;; MSG SIZE  rcvd: 106

Host info

55.74.244.104.in-addr.arpa domain name pointer torproject.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.74.244.104.in-addr.arpa	name = torproject.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
181.13.179.250	attackbots	" "	2019-08-02 16:10:36
187.19.200.154	attackbotsspam	failed_logins	2019-08-02 16:42:24
213.159.213.54	attackbots	Aug 2 08:13:17 vmd17057 sshd\[3512\]: Invalid user dana from 213.159.213.54 port 48744 Aug 2 08:13:17 vmd17057 sshd\[3512\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.159.213.54 Aug 2 08:13:19 vmd17057 sshd\[3512\]: Failed password for invalid user dana from 213.159.213.54 port 48744 ssh2 ...	2019-08-02 16:14:44
24.148.115.153	attackspam	Invalid user openerp from 24.148.115.153 port 41780	2019-08-02 16:45:45
202.139.192.225	attackspam	Aug 2 00:48:05 keyhelp sshd[32760]: Invalid user altri from 202.139.192.225 Aug 2 00:48:05 keyhelp sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.139.192.225 Aug 2 00:48:07 keyhelp sshd[32760]: Failed password for invalid user altri from 202.139.192.225 port 58512 ssh2 Aug 2 00:48:07 keyhelp sshd[32760]: Received disconnect from 202.139.192.225 port 58512:11: Bye Bye [preauth] Aug 2 00:48:07 keyhelp sshd[32760]: Disconnected from 202.139.192.225 port 58512 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=202.139.192.225	2019-08-02 16:16:42
79.47.208.112	attack	Triggered by Fail2Ban at Ares web server	2019-08-02 16:17:43
103.35.64.222	attackbots	Aug 2 06:51:35 server sshd\[13461\]: Invalid user mathilde from 103.35.64.222 port 57426 Aug 2 06:51:35 server sshd\[13461\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.222 Aug 2 06:51:37 server sshd\[13461\]: Failed password for invalid user mathilde from 103.35.64.222 port 57426 ssh2 Aug 2 06:56:54 server sshd\[7007\]: Invalid user deploy from 103.35.64.222 port 63254 Aug 2 06:56:54 server sshd\[7007\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.222	2019-08-02 16:44:32
51.91.18.233	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-08-02 16:48:29
106.75.103.35	attackspam	Aug 2 04:42:38 XXX sshd[49979]: Invalid user ahmed from 106.75.103.35 port 38736	2019-08-02 16:11:45
73.212.16.243	attack	Invalid user sunset from 73.212.16.243 port 42336	2019-08-02 16:26:12
51.75.124.76	attack	Aug 2 03:09:41 s64-1 sshd[13520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76 Aug 2 03:09:43 s64-1 sshd[13520]: Failed password for invalid user er from 51.75.124.76 port 51692 ssh2 Aug 2 03:13:38 s64-1 sshd[13577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.76 ...	2019-08-02 16:25:08
178.62.118.53	attack	$f2bV_matches_ltvn	2019-08-02 16:06:26
154.126.132.130	attackbotsspam	Sniffing for wp-login	2019-08-02 16:42:57
187.113.46.137	attackbots	Aug 2 10:32:39 web2 sshd[30065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.113.46.137 Aug 2 10:32:40 web2 sshd[30065]: Failed password for invalid user lshields from 187.113.46.137 port 49772 ssh2	2019-08-02 16:52:05
46.166.151.47	attackbotsspam	\[2019-08-02 03:42:33\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-02T03:42:33.632-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="800046812111465",SessionID="0x7ff4d06383c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/65427",ACLName="no_extension_match" \[2019-08-02 03:44:10\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-02T03:44:10.070-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00346812400638",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/49478",ACLName="no_extension_match" \[2019-08-02 03:51:37\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-02T03:51:37.925-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00346406829453",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/64071",ACLName="no_exten	2019-08-02 16:06:57

Recently Reported IPs

201.79.52.53	168.70.106.120	124.122.186.247	111.43.107.136
95.81.84.180	181.129.106.146	39.175.224.232	31.173.87.206
5.248.28.210	92.205.24.173	170.106.152.4	189.152.138.188
197.33.232.226	179.127.195.11	77.81.142.27	200.194.25.35
181.211.37.228	223.149.143.14	201.158.24.102	59.89.177.17