104.247.75.122

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.247.75.1	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/104.247.75.1/ US - 1H : (107) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN22611 IP : 104.247.75.1 CIDR : 104.247.74.0/23 PREFIX COUNT : 74 UNIQUE IP COUNT : 46336 ATTACKS DETECTED ASN22611 : 1H - 2 3H - 2 6H - 2 12H - 2 24H - 2 DateTime : 2019-12-13 16:59:59 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-12-14 00:17:26
104.247.75.218	attackspambots	From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] DCU phishing/fraud; illicit use of entity name/credentials/copyright. Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48 Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect: - northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc. Appear to redirect/replicate valid DCU web site: - Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid - Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon	2019-11-14 23:44:45

Type

Details

Datetime

104.247.75.1

attackbots

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/104.247.75.1/ 
 
 US - 1H : (107)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN22611 
 
 IP : 104.247.75.1 
 
 CIDR : 104.247.74.0/23 
 
 PREFIX COUNT : 74 
 
 UNIQUE IP COUNT : 46336 
 
 
 ATTACKS DETECTED ASN22611 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-12-13 16:59:59 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-12-14 00:17:26

104.247.75.218

attackspambots

From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] 
DCU phishing/fraud; illicit use of entity name/credentials/copyright.

Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48

Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect:
-	northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc.

Appear to redirect/replicate valid DCU web site:
-	Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid
-	Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon

2019-11-14 23:44:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.247.75.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.247.75.122.			IN	A

;; AUTHORITY SECTION:
.			383	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 06:08:08 CST 2022
;; MSG SIZE  rcvd: 107

Host info

122.75.247.104.in-addr.arpa domain name pointer dw.houseplansbydavidwiggins.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
122.75.247.104.in-addr.arpa	name = dw.houseplansbydavidwiggins.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
191.34.74.55	attackbotsspam	Nov 29 08:30:10 vpn01 sshd[28203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.74.55 Nov 29 08:30:12 vpn01 sshd[28203]: Failed password for invalid user moughayar from 191.34.74.55 port 50674 ssh2 ...	2019-11-29 15:39:01
118.24.193.176	attackspam	Nov 29 07:24:23 dev0-dcde-rnet sshd[9136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.193.176 Nov 29 07:24:24 dev0-dcde-rnet sshd[9136]: Failed password for invalid user modesto from 118.24.193.176 port 56610 ssh2 Nov 29 07:28:26 dev0-dcde-rnet sshd[9165]: Failed password for root from 118.24.193.176 port 35762 ssh2	2019-11-29 16:00:53
180.68.177.15	attackspam	F2B jail: sshd. Time: 2019-11-29 09:05:48, Reported by: VKReport	2019-11-29 16:07:14
141.98.81.37	attack	Nov 29 08:47:32 vpn01 sshd[28458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.37 Nov 29 08:47:34 vpn01 sshd[28458]: Failed password for invalid user admin from 141.98.81.37 port 29895 ssh2 ...	2019-11-29 16:08:40
74.121.190.26	attack	\[2019-11-29 03:04:34\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-29T03:04:34.762-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048627490012",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.121.190.26/57671",ACLName="no_extension_match" \[2019-11-29 03:05:31\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-29T03:05:31.175-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00048627490012",SessionID="0x7f26c44efca8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.121.190.26/55650",ACLName="no_extension_match" \[2019-11-29 03:06:19\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-29T03:06:19.696-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="48627490012",SessionID="0x7f26c4022278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/74.121.190.26/59824",ACLName="no_extension_	2019-11-29 16:12:27
185.175.93.19	attack	Nov 29 08:09:43 mc1 kernel: \[6297605.465976\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.19 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=52787 PROTO=TCP SPT=52927 DPT=3814 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 29 08:16:33 mc1 kernel: \[6298015.073811\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.19 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=46301 PROTO=TCP SPT=52927 DPT=3976 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 29 08:17:13 mc1 kernel: \[6298055.014997\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.19 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=42727 PROTO=TCP SPT=52927 DPT=3898 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-29 15:52:08
163.172.93.131	attackbotsspam	2019-11-29T07:47:02.627157abusebot.cloudsearch.cf sshd\[28936\]: Invalid user minecraft from 163.172.93.131 port 55176	2019-11-29 15:49:03
172.81.237.242	attackbots	Nov 29 09:53:04 sauna sshd[89161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.237.242 Nov 29 09:53:06 sauna sshd[89161]: Failed password for invalid user newadmin from 172.81.237.242 port 57306 ssh2 ...	2019-11-29 15:54:49
176.236.13.75	attack	Nov 29 08:24:53 www sshd\[42712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.236.13.75 user=root Nov 29 08:24:55 www sshd\[42712\]: Failed password for root from 176.236.13.75 port 17208 ssh2 Nov 29 08:28:46 www sshd\[42726\]: Invalid user webadmin from 176.236.13.75 ...	2019-11-29 15:50:08
138.197.98.251	attackspam	SSH bruteforce (Triggered fail2ban)	2019-11-29 15:56:00
63.80.184.117	attackspam	Nov 29 07:28:28 smtp postfix/smtpd[23031]: NOQUEUE: reject: RCPT from island.sapuxfiori.com[63.80.184.117]: 554 5.7.1 Service unavailable; Client host [63.80.184.117] blocked using zen.spamhaus.org; from= to= proto=ESMTP helo= ...	2019-11-29 15:59:14
164.132.47.139	attackbots	Nov 29 08:43:18 dedicated sshd[9146]: Invalid user yyyyy from 164.132.47.139 port 34050	2019-11-29 16:00:20
80.211.86.245	attackbotsspam	Nov 29 07:28:16 MK-Soft-VM3 sshd[19551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245 Nov 29 07:28:18 MK-Soft-VM3 sshd[19551]: Failed password for invalid user stolp from 80.211.86.245 port 60066 ssh2 ...	2019-11-29 16:04:27
49.248.97.227	attack	Nov 29 08:04:27 ns37 sshd[4880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.248.97.227 Nov 29 08:04:27 ns37 sshd[4880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.248.97.227	2019-11-29 15:49:35
219.94.95.83	attack	Nov 29 01:21:42 aragorn sshd[3072]: Invalid user maria from 219.94.95.83 Nov 29 01:26:14 aragorn sshd[4171]: Invalid user admin from 219.94.95.83 Nov 29 01:28:58 aragorn sshd[4199]: Invalid user oracle from 219.94.95.83 Nov 29 01:28:59 aragorn sshd[4200]: Invalid user oracle from 219.94.95.83 ...	2019-11-29 15:42:12

Recently Reported IPs

104.247.74.232	104.247.75.17	104.247.76.104	104.247.78.66
104.247.79.115	104.248.0.58	104.248.1.30	104.248.10.18
104.248.100.173	104.248.121.207	104.248.121.234	104.248.133.219
104.248.135.33	104.248.139.230	104.248.141.64	104.248.142.173
242.20.251.106	104.248.146.161	104.248.148.151	104.248.149.222