74.120.14.31 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Default Route LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Automatic report - Banned IP Access	2020-10-07 07:06:21
attack	Honeypot hit.	2020-10-06 23:26:24
attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-06 15:15:37
attackbots	Multiport scan 34 ports : 2(x2) 21 22 53(x3) 80(x2) 81(x2) 82(x2) 110(x2) 161(x2) 465 591 623 993 1194(x3) 1433 1521(x2) 2082 2222 5432 5672(x2) 5683 5684(x2) 5902 5984(x2) 6379 6443 8080(x2) 8081 8443(x2) 8888 9090 16992 20000 22222	2020-10-05 06:22:17
attackbotsspam	TCP (SYN) 74.120.14.31:31185 -> port 445, len 44	2020-10-04 22:22:44
attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 64 - port: 1194 proto: udp cat: Misc Attackbytes: 60	2020-10-04 14:08:59
attack	" "	2020-09-29 02:17:22
attackspam	Found on CINS badguys / proto=6 . srcport=56583 . dstport=2 . (114)	2020-09-28 18:24:45
attackbotsspam	TCP (SYN) 74.120.14.31:37918 -> port 21, len 44	2020-09-22 02:56:02
attackbotsspam	TCP (SYN) 74.120.14.31:47828 -> port 1911, len 44	2020-09-21 18:40:39

Comments on same subnet:

IP	Type	Details	Datetime
74.120.14.29	attackbots	TCP (SYN) 74.120.14.29:49585 -> port 995, len 44	2020-10-14 06:47:10
74.120.14.18	attack	TCP (SYN) 74.120.14.18:63537 -> port 8080, len 44	2020-10-14 05:41:37
74.120.14.16	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 66 - port: 8089 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:22:14
74.120.14.71	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 67 - port: 7070 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:06:23
74.120.14.27	attackspambots	Port scan: Attack repeated for 24 hours	2020-10-14 03:44:00
74.120.14.74	attack	TCP (SYN) 74.120.14.74:36705 -> port 5495, len 44	2020-10-13 22:38:32
74.120.14.16	attack	TCP (SYN) 74.120.14.16:37330 -> port 25, len 44	2020-10-13 20:41:28
74.120.14.67	attackbots	9833/tcp 9718/tcp 18029/tcp... [2020-09-14/10-13]192pkt,176pt.(tcp)	2020-10-13 20:41:03
74.120.14.27	attackspam	TCP (SYN) 74.120.14.27:33289 -> port 2222, len 44	2020-10-13 19:03:33
74.120.14.74	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 65	2020-10-13 13:59:10
74.120.14.16	attack	spam	2020-10-13 12:13:05
74.120.14.67	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 65 - port: 8382 proto: tcp cat: Misc Attackbytes: 60	2020-10-13 12:12:48
74.120.14.75	attackspam	TCP (SYN) 74.120.14.75:2675 -> port 3010, len 44	2020-10-13 12:12:15
74.120.14.74	attackbots	TCP (SYN) 74.120.14.74:24302 -> port 9845, len 44	2020-10-13 06:43:19
74.120.14.16	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 64 - port: 1194 proto: tcp cat: Misc Attackbytes: 60	2020-10-13 05:02:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.120.14.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62406
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;74.120.14.31.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092100 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 21 18:40:34 CST 2020
;; MSG SIZE  rcvd: 116

Host info

31.14.120.74.in-addr.arpa domain name pointer scanner-02.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
31.14.120.74.in-addr.arpa	name = scanner-02.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.173.215	attackspambots	May 2 06:32:23 meumeu sshd[10464]: Failed password for root from 222.186.173.215 port 63100 ssh2 May 2 06:32:27 meumeu sshd[10464]: Failed password for root from 222.186.173.215 port 63100 ssh2 May 2 06:32:31 meumeu sshd[10464]: Failed password for root from 222.186.173.215 port 63100 ssh2 May 2 06:32:40 meumeu sshd[10464]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 63100 ssh2 [preauth] ...	2020-05-02 12:33:49
79.180.64.112	attackbots	Automatic report - Port Scan Attack	2020-05-02 12:42:47
111.230.236.93	attackbotsspam	May 2 06:36:34 host sshd[30321]: Invalid user miner from 111.230.236.93 port 45380 ...	2020-05-02 12:37:50
66.249.79.158	attackbots	Automatic report - Banned IP Access	2020-05-02 12:33:15
45.142.195.5	attackspambots	May 2 05:39:33 mail postfix/smtpd\[32040\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 2 05:40:05 mail postfix/smtpd\[32040\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 2 06:10:22 mail postfix/smtpd\[32634\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 2 06:10:56 mail postfix/smtpd\[32715\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-05-02 12:29:44
217.112.128.143	attack	May 2 05:47:33 mail.srvfarm.net postfix/smtpd[1730651]: NOQUEUE: reject: RCPT from unknown[217.112.128.143]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 2 05:49:22 mail.srvfarm.net postfix/smtpd[1728026]: NOQUEUE: reject: RCPT from unknown[217.112.128.143]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 2 05:54:07 mail.srvfarm.net postfix/smtpd[1728026]: NOQUEUE: reject: RCPT from unknown[217.112.128.143]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 2 05:54:42 mail.srvfarm.net postfix/smtpd[1730698]: NOQUEUE: reject: RCPT from unknown[217.112.128.143]: 450 4.1.8	2020-05-02 12:18:49
78.128.113.100	attack	2020-05-02 16:14:44 fixed_plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=chris@thepuddles.net.nz) 2020-05-02 16:14:57 fixed_plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=chris) 2020-05-02 16:20:57 fixed_plain authenticator failed for ([78.128.113.100]) [78.128.113.100]: 535 Incorrect authentication data (set_id=aaron@thepuddles.net.nz) ...	2020-05-02 12:27:12
49.88.112.76	attack	2020-05-02T03:57:58.134325shield sshd\[8451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.76 user=root 2020-05-02T03:57:59.486016shield sshd\[8451\]: Failed password for root from 49.88.112.76 port 11658 ssh2 2020-05-02T03:58:01.568927shield sshd\[8451\]: Failed password for root from 49.88.112.76 port 11658 ssh2 2020-05-02T03:58:04.250448shield sshd\[8451\]: Failed password for root from 49.88.112.76 port 11658 ssh2 2020-05-02T03:58:31.161433shield sshd\[8485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.76 user=root	2020-05-02 12:09:45
208.187.167.69	attackspambots	2020-05-02 1jUirD-0003j0-HR H=hypnotic.onvacationnow.com \(hypnotic.awaykart.com\) \[208.187.167.69\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-05-02 H=hypnotic.onvacationnow.com \(hypnotic.awaykart.com\) \[208.187.167.69\] F=\ rejected RCPT \<REMOVED@REMOVED.de\>: Mail not accepted. 208.187.167.69 is listed at a DNSBL. 2020-05-02 H=hypnotic.onvacationnow.com \(hypnotic.awaykart.com\) \[208.187.167.69\] F=\ rejected RCPT \: Mail not accepted. 208.187.167.69 is listed at a DNSBL.	2020-05-02 12:19:12
118.25.21.176	attackbots	May 2 05:53:06 jane sshd[29531]: Failed password for root from 118.25.21.176 port 56740 ssh2 ...	2020-05-02 12:42:13
185.50.149.11	attackbotsspam	2020-05-02 07:14:02 dovecot_login authenticator failed for \(\[185.50.149.11\]\) \[185.50.149.11\]: 535 Incorrect authentication data \(set_id=hostmaster@ift.org.ua\)2020-05-02 07:14:11 dovecot_login authenticator failed for \(\[185.50.149.11\]\) \[185.50.149.11\]: 535 Incorrect authentication data2020-05-02 07:14:22 dovecot_login authenticator failed for \(\[185.50.149.11\]\) \[185.50.149.11\]: 535 Incorrect authentication data ...	2020-05-02 12:22:33
193.228.108.122	attack	May 2 06:39:55 localhost sshd\[9454\]: Invalid user bash from 193.228.108.122 May 2 06:39:55 localhost sshd\[9454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.108.122 May 2 06:39:57 localhost sshd\[9454\]: Failed password for invalid user bash from 193.228.108.122 port 47116 ssh2 May 2 06:42:55 localhost sshd\[9719\]: Invalid user uma from 193.228.108.122 May 2 06:42:55 localhost sshd\[9719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.108.122 ...	2020-05-02 12:48:46
137.74.155.56	attackbotsspam	May 2 05:54:21 eventyay sshd[6860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.155.56 May 2 05:54:23 eventyay sshd[6860]: Failed password for invalid user theis from 137.74.155.56 port 38378 ssh2 May 2 05:58:26 eventyay sshd[6960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.155.56 ...	2020-05-02 12:13:33
1.54.204.155	attack	05/01/2020-23:58:28.941270 1.54.204.155 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-05-02 12:12:02
51.132.21.180	attack	May 2 00:28:21 NPSTNNYC01T sshd[8548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.132.21.180 May 2 00:28:22 NPSTNNYC01T sshd[8548]: Failed password for invalid user ocadmin from 51.132.21.180 port 56908 ssh2 May 2 00:32:30 NPSTNNYC01T sshd[8836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.132.21.180 ...	2020-05-02 12:44:36

Recently Reported IPs

172.81.208.125	13.92.97.171	35.190.214.113	125.42.4.7
37.208.139.94	24.249.17.101	155.4.113.161	104.223.29.193
123.194.117.96	120.85.60.41	115.98.13.74	195.58.38.183
119.29.170.38	45.56.183.34	193.196.55.179	20.194.3.84
119.15.136.245	197.162.254.143	164.90.194.165	113.110.200.244