47.104.189.74 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Aliyun Computing Co. Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
47.104.189.224	attack	May 31 16:21:54 Tower sshd[7699]: Connection from 47.104.189.224 port 59180 on 192.168.10.220 port 22 rdomain "" May 31 16:21:56 Tower sshd[7699]: Failed password for root from 47.104.189.224 port 59180 ssh2 May 31 16:21:57 Tower sshd[7699]: Received disconnect from 47.104.189.224 port 59180:11: Bye Bye [preauth] May 31 16:21:57 Tower sshd[7699]: Disconnected from authenticating user root 47.104.189.224 port 59180 [preauth]	2020-06-01 08:12:30

Type

Details

Datetime

47.104.189.224

attack

May 31 16:21:54 Tower sshd[7699]: Connection from 47.104.189.224 port 59180 on 192.168.10.220 port 22 rdomain ""
May 31 16:21:56 Tower sshd[7699]: Failed password for root from 47.104.189.224 port 59180 ssh2
May 31 16:21:57 Tower sshd[7699]: Received disconnect from 47.104.189.224 port 59180:11: Bye Bye [preauth]
May 31 16:21:57 Tower sshd[7699]: Disconnected from authenticating user root 47.104.189.224 port 59180 [preauth]

2020-06-01 08:12:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.104.189.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51193
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;47.104.189.74.			IN	A

;; AUTHORITY SECTION:
.			488	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031301 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 14 05:08:21 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 74.189.104.47.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 74.189.104.47.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
116.114.95.128	attack	Telnet Server BruteForce Attack	2020-08-06 03:41:55
193.150.88.173	attack	Automatic report - Banned IP Access	2020-08-06 03:42:58
159.65.33.243	attackspam	Attempted to establish connection to non opened port 10522	2020-08-06 04:05:07
79.162.242.191	attackbotsspam	79.162.242.191 - - \[05/Aug/2020:20:11:42 +0800\] "GET /phpmyadmin/index.php\?lang=en HTTP/1.1" 404 360 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/77.0.3865.120 Safari/537.36"	2020-08-06 03:37:09
167.71.94.147	attack	167.71.94.147 - - [05/Aug/2020:13:51:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.94.147 - - [05/Aug/2020:14:10:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 22621 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 04:06:39
45.55.170.59	attackbotsspam	45.55.170.59 - - [05/Aug/2020:17:33:15 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.170.59 - - [05/Aug/2020:17:33:17 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.170.59 - - [05/Aug/2020:17:33:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-06 04:09:10
103.51.103.3	attack	103.51.103.3 - - [05/Aug/2020:14:34:17 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.51.103.3 - - [05/Aug/2020:14:34:20 +0100] "POST /wp-login.php HTTP/1.1" 200 1971 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.51.103.3 - - [05/Aug/2020:14:34:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2013 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 04:05:24
45.134.179.102	attack	Aug 5 21:01:49 mertcangokgoz-v4-main kernel: [267451.071415] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:5a:6b:04:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.102 DST=94.130.96.165 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=47570 PROTO=TCP SPT=48275 DPT=5240 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-06 03:45:09
37.252.188.130	attackspambots	Aug 5 16:04:04 vm1 sshd[6213]: Failed password for root from 37.252.188.130 port 53862 ssh2 ...	2020-08-06 03:38:54
168.90.204.31	attackbotsspam	TCP (SYN) 168.90.204.31:27669 -> port 23, len 44	2020-08-06 03:50:41
45.145.66.50	attack	Aug 5 14:10:55 debian-2gb-nbg1-2 kernel: \[18887916.700027\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.50 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46643 PROTO=TCP SPT=42854 DPT=6850 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-06 04:00:51
49.235.90.244	attackspambots	Aug 5 16:15:57 haigwepa sshd[8174]: Failed password for root from 49.235.90.244 port 56048 ssh2 ...	2020-08-06 04:08:26
117.51.145.81	attackbotsspam	prod6 ...	2020-08-06 04:10:10
61.160.196.28	attackbotsspam	Port Scan detected! ...	2020-08-06 03:34:29
196.27.127.61	attackspam	2020-08-05T01:01:46.362912hostname sshd[109922]: Failed password for root from 196.27.127.61 port 52292 ssh2 ...	2020-08-06 04:03:25

Recently Reported IPs

253.186.226.90	184.192.79.45	81.188.17.202	56.114.28.215
6.44.108.246	253.146.29.18	207.181.104.7	153.32.147.138
164.65.224.43	38.69.12.118	14.181.39.38	179.176.75.27
169.47.190.161	91.17.166.254	195.205.175.120	77.85.188.73
77.164.23.155	182.110.18.53	59.173.58.160	108.87.246.34