74.120.14.41 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Default Route LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Oct 3 23:37:01 baraca inetd[61588]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp) Oct 3 23:37:02 baraca inetd[61589]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp) Oct 3 23:37:04 baraca inetd[61590]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp) ...	2020-10-05 02:15:39
attackspambots	Oct 3 23:37:01 baraca inetd[61588]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp) Oct 3 23:37:02 baraca inetd[61589]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp) Oct 3 23:37:04 baraca inetd[61590]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp) ...	2020-10-04 17:57:53

Type

Details

Datetime

attack

Oct  3 23:37:01 baraca inetd[61588]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp)
Oct  3 23:37:02 baraca inetd[61589]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp)
Oct  3 23:37:04 baraca inetd[61590]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp)
...

2020-10-05 02:15:39

attackspambots

Oct  3 23:37:01 baraca inetd[61588]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp)
Oct  3 23:37:02 baraca inetd[61589]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp)
Oct  3 23:37:04 baraca inetd[61590]: refused connection from scanner-06.ch1.censys-scanner.com, service sshd (tcp)
...

2020-10-04 17:57:53

Comments on same subnet:

IP	Type	Details	Datetime
74.120.14.29	attackbots	TCP (SYN) 74.120.14.29:49585 -> port 995, len 44	2020-10-14 06:47:10
74.120.14.18	attack	TCP (SYN) 74.120.14.18:63537 -> port 8080, len 44	2020-10-14 05:41:37
74.120.14.16	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 66 - port: 8089 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:22:14
74.120.14.71	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 67 - port: 7070 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:06:23
74.120.14.27	attackspambots	Port scan: Attack repeated for 24 hours	2020-10-14 03:44:00
74.120.14.74	attack	TCP (SYN) 74.120.14.74:36705 -> port 5495, len 44	2020-10-13 22:38:32
74.120.14.16	attack	TCP (SYN) 74.120.14.16:37330 -> port 25, len 44	2020-10-13 20:41:28
74.120.14.67	attackbots	9833/tcp 9718/tcp 18029/tcp... [2020-09-14/10-13]192pkt,176pt.(tcp)	2020-10-13 20:41:03
74.120.14.27	attackspam	TCP (SYN) 74.120.14.27:33289 -> port 2222, len 44	2020-10-13 19:03:33
74.120.14.74	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 65	2020-10-13 13:59:10
74.120.14.16	attack	spam	2020-10-13 12:13:05
74.120.14.67	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 65 - port: 8382 proto: tcp cat: Misc Attackbytes: 60	2020-10-13 12:12:48
74.120.14.75	attackspam	TCP (SYN) 74.120.14.75:2675 -> port 3010, len 44	2020-10-13 12:12:15
74.120.14.74	attackbots	TCP (SYN) 74.120.14.74:24302 -> port 9845, len 44	2020-10-13 06:43:19
74.120.14.16	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 64 - port: 1194 proto: tcp cat: Misc Attackbytes: 60	2020-10-13 05:02:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.120.14.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;74.120.14.41.			IN	A

;; AUTHORITY SECTION:
.			219	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100301 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 04 17:57:47 CST 2020
;; MSG SIZE  rcvd: 116

Host info

41.14.120.74.in-addr.arpa domain name pointer scanner-06.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
41.14.120.74.in-addr.arpa	name = scanner-06.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.162.151.229	attackbotsspam	SMTP brute force ...	2020-03-12 03:57:24
119.61.2.50	attackbots	Mar 11 21:17:37 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=119.61.2.50, lip=212.111.212.230, session=\ Mar 11 21:17:47 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 9 secs$: user=\, method=PLAIN, rip=119.61.2.50, lip=212.111.212.230, session=\ Mar 11 21:18:00 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=119.61.2.50, lip=212.111.212.230, session=\<+zGGF5mg5Ix3PQIy\> Mar 11 21:19:11 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=119.61.2.50, lip=212.111.212.230, session=\ Mar 11 21:19:20 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=119.61.2.50, lip=212.111.212.230, ...	2020-03-12 03:42:19
138.201.207.106	attackspambots	Automatic report - Port Scan Attack	2020-03-12 03:31:36
222.186.175.220	attackspam	2020-03-11T15:21:53.770524xentho-1 sshd[340416]: Failed password for root from 222.186.175.220 port 2886 ssh2 2020-03-11T15:21:47.209510xentho-1 sshd[340416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220 user=root 2020-03-11T15:21:48.805600xentho-1 sshd[340416]: Failed password for root from 222.186.175.220 port 2886 ssh2 2020-03-11T15:21:53.770524xentho-1 sshd[340416]: Failed password for root from 222.186.175.220 port 2886 ssh2 2020-03-11T15:21:57.871564xentho-1 sshd[340416]: Failed password for root from 222.186.175.220 port 2886 ssh2 2020-03-11T15:21:47.209510xentho-1 sshd[340416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220 user=root 2020-03-11T15:21:48.805600xentho-1 sshd[340416]: Failed password for root from 222.186.175.220 port 2886 ssh2 2020-03-11T15:21:53.770524xentho-1 sshd[340416]: Failed password for root from 222.186.175.220 port 2886 ssh2 2020-03-11T1 ...	2020-03-12 03:24:42
132.232.93.48	attack	no	2020-03-12 03:42:50
142.93.15.179	attackbotsspam	$f2bV_matches	2020-03-12 03:52:07
185.47.65.30	attackspam	k+ssh-bruteforce	2020-03-12 03:12:42
78.41.175.161	attack	Mar 11 20:16:25 rotator sshd\[6404\]: Invalid user server from 78.41.175.161Mar 11 20:16:27 rotator sshd\[6404\]: Failed password for invalid user server from 78.41.175.161 port 48632 ssh2Mar 11 20:20:13 rotator sshd\[7024\]: Invalid user kabe from 78.41.175.161Mar 11 20:20:15 rotator sshd\[7024\]: Failed password for invalid user kabe from 78.41.175.161 port 37882 ssh2Mar 11 20:23:55 rotator sshd\[7225\]: Invalid user testuser from 78.41.175.161Mar 11 20:23:57 rotator sshd\[7225\]: Failed password for invalid user testuser from 78.41.175.161 port 55358 ssh2 ...	2020-03-12 03:26:43
34.84.243.185	attackbotsspam	SSH Brute-Forcing (server1)	2020-03-12 03:38:22
101.236.60.31	attack	Brute force attempt	2020-03-12 03:37:27
148.243.170.66	attack	Unauthorized connection attempt detected from IP address 148.243.170.66 to port 1433	2020-03-12 03:19:30
31.199.193.162	attack	(sshd) Failed SSH login from 31.199.193.162 (IT/Italy/host-31-199-193-162.business.telecomitalia.it): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 11 20:19:42 ubnt-55d23 sshd[23390]: Invalid user william from 31.199.193.162 port 6788 Mar 11 20:19:45 ubnt-55d23 sshd[23390]: Failed password for invalid user william from 31.199.193.162 port 6788 ssh2	2020-03-12 03:24:09
177.81.208.134	attackspam	Automatic report - Port Scan Attack	2020-03-12 03:49:18
156.96.148.55	attack	(sshd) Failed SSH login from 156.96.148.55 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 11 20:19:33 ubnt-55d23 sshd[23347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.148.55 user=root Mar 11 20:19:35 ubnt-55d23 sshd[23347]: Failed password for root from 156.96.148.55 port 38622 ssh2	2020-03-12 03:23:00
51.83.72.243	attackspam	Mar 11 20:16:08 ewelt sshd[435]: Invalid user rstudio-server from 51.83.72.243 port 50936 Mar 11 20:16:11 ewelt sshd[435]: Failed password for invalid user rstudio-server from 51.83.72.243 port 50936 ssh2 Mar 11 20:19:44 ewelt sshd[659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.72.243 user=root Mar 11 20:19:47 ewelt sshd[659]: Failed password for root from 51.83.72.243 port 40188 ssh2 ...	2020-03-12 03:21:31

Recently Reported IPs

123.129.27.58	117.25.60.204	5.141.178.251	39.79.146.116
138.197.213.241	190.147.251.89	61.54.192.79	35.97.235.14
103.18.6.65	102.10.247.103	98.209.166.170	36.2.65.109
178.169.155.202	223.64.115.69	51.35.6.240	55.21.70.139
206.168.167.92	194.147.207.161	206.211.157.180	38.53.223.233