74.120.14.68 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Default Route LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-02 03:16:58
attack	TCP (SYN) 74.120.14.68:23044 -> port 9968, len 44	2020-10-01 19:29:38

Comments on same subnet:

IP	Type	Details	Datetime
74.120.14.29	attackbots	TCP (SYN) 74.120.14.29:49585 -> port 995, len 44	2020-10-14 06:47:10
74.120.14.18	attack	TCP (SYN) 74.120.14.18:63537 -> port 8080, len 44	2020-10-14 05:41:37
74.120.14.16	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 66 - port: 8089 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:22:14
74.120.14.71	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 67 - port: 7070 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:06:23
74.120.14.27	attackspambots	Port scan: Attack repeated for 24 hours	2020-10-14 03:44:00
74.120.14.74	attack	TCP (SYN) 74.120.14.74:36705 -> port 5495, len 44	2020-10-13 22:38:32
74.120.14.16	attack	TCP (SYN) 74.120.14.16:37330 -> port 25, len 44	2020-10-13 20:41:28
74.120.14.67	attackbots	9833/tcp 9718/tcp 18029/tcp... [2020-09-14/10-13]192pkt,176pt.(tcp)	2020-10-13 20:41:03
74.120.14.27	attackspam	TCP (SYN) 74.120.14.27:33289 -> port 2222, len 44	2020-10-13 19:03:33
74.120.14.74	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 65	2020-10-13 13:59:10
74.120.14.16	attack	spam	2020-10-13 12:13:05
74.120.14.67	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 65 - port: 8382 proto: tcp cat: Misc Attackbytes: 60	2020-10-13 12:12:48
74.120.14.75	attackspam	TCP (SYN) 74.120.14.75:2675 -> port 3010, len 44	2020-10-13 12:12:15
74.120.14.74	attackbots	TCP (SYN) 74.120.14.74:24302 -> port 9845, len 44	2020-10-13 06:43:19
74.120.14.16	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 64 - port: 1194 proto: tcp cat: Misc Attackbytes: 60	2020-10-13 05:02:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.120.14.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;74.120.14.68.			IN	A

;; AUTHORITY SECTION:
.			155	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020093002 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 01 19:29:32 CST 2020
;; MSG SIZE  rcvd: 116

Host info

68.14.120.74.in-addr.arpa domain name pointer scanner-11.ch1.censys-scanner.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
68.14.120.74.in-addr.arpa	name = scanner-11.ch1.censys-scanner.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.155.126.36	attackspam	2020-02-01 22:49:09 H=edm8.edmeventallgain.info [45.155.126.36]:60957 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-02-01 22:49:09 H=edm8.edmeventallgain.info [45.155.126.36]:60957 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-02-01 22:49:10 H=edm8.edmeventallgain.info [45.155.126.36]:60957 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.2) (https://www.spamhaus.org/sbl/query/SBL476535) ...	2020-02-02 20:43:37
89.248.160.150	attack	Feb 2 13:35:45 debian-2gb-nbg1-2 kernel: \[2906199.625583\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.160.150 DST=195.201.40.59 LEN=57 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=34257 DPT=28012 LEN=37	2020-02-02 20:47:12
106.13.182.160	attackbotsspam	Unauthorized connection attempt detected from IP address 106.13.182.160 to port 2220 [J]	2020-02-02 21:01:53
39.108.152.95	attackbotsspam	39.108.152.95 - - [02/Feb/2020:11:47:33 +0300] "POST /wp-login.php HTTP/1.1" 200 2568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-02-02 21:02:19
134.209.175.243	attack	Unauthorized connection attempt detected from IP address 134.209.175.243 to port 2220 [J]	2020-02-02 20:53:41
31.15.10.104	attackbotsspam	31.15.10.104 - - [02/Feb/2020:04:48:32 +0000] "POST /wp/wp-login.php HTTP/1.1" 200 6040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 31.15.10.104 - - [02/Feb/2020:04:48:34 +0000] "POST /wp/wp-login.php HTTP/1.1" 200 5770 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-02 21:10:07
15.206.145.43	attackbotsspam	Unauthorized connection attempt detected from IP address 15.206.145.43 to port 2220 [J]	2020-02-02 21:00:17
131.221.80.161	attack	Unauthorized connection attempt detected from IP address 131.221.80.161 to port 2220 [J]	2020-02-02 20:51:43
185.143.223.168	attackspam	Feb 2 12:30:52 grey postfix/smtpd\[19680\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\<7gthv2ef60i4k7@centralhotel32.ru\> to=\ proto=ESMTP helo=\<\[185.143.223.160\]\>Feb 2 12:30:52 grey postfix/smtpd\[19680\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\<7gthv2ef60i4k7@centralhotel32.ru\> to=\ proto=ESMTP helo=\<\[185.143.223.160\]\>Feb 2 12:30:52 grey postfix/smtpd\[19680\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\<7gthv2ef60 ...	2020-02-02 20:37:31
151.29.180.8	attack	Lines containing failures of 151.29.180.8 Feb 2 09:27:44 shared11 sshd[22144]: Invalid user pi from 151.29.180.8 port 58384 Feb 2 09:27:44 shared11 sshd[22146]: Invalid user pi from 151.29.180.8 port 58386 Feb 2 09:27:45 shared11 sshd[22146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.29.180.8 Feb 2 09:27:45 shared11 sshd[22144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.29.180.8 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=151.29.180.8	2020-02-02 21:12:53
46.10.220.33	attackbotsspam	Unauthorized connection attempt detected from IP address 46.10.220.33 to port 2220 [J]	2020-02-02 20:32:27
42.119.115.86	attackbots	Unauthorized connection attempt detected from IP address 42.119.115.86 to port 23 [J]	2020-02-02 21:14:57
61.177.172.128	attack	Feb 2 03:06:21 php1 sshd\[25443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Feb 2 03:06:22 php1 sshd\[25443\]: Failed password for root from 61.177.172.128 port 20961 ssh2 Feb 2 03:06:25 php1 sshd\[25443\]: Failed password for root from 61.177.172.128 port 20961 ssh2 Feb 2 03:06:35 php1 sshd\[25443\]: Failed password for root from 61.177.172.128 port 20961 ssh2 Feb 2 03:06:39 php1 sshd\[25447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root	2020-02-02 21:10:36
218.4.163.146	attackspam	Unauthorized connection attempt detected from IP address 218.4.163.146 to port 2220 [J]	2020-02-02 20:39:47
31.25.142.150	attackspambots	Unauthorized connection attempt detected from IP address 31.25.142.150 to port 2220 [J]	2020-02-02 20:47:48

Recently Reported IPs

113.230.243.23	184.119.115.251	101.74.236.41	119.123.64.242
196.75.230.111	128.135.193.55	105.163.194.149	45.146.167.192
42.57.116.196	146.219.222.233	161.17.188.207	157.230.61.233
200.236.123.220	135.71.28.112	51.210.178.206	60.196.69.234
172.81.235.238	141.53.155.70	103.224.82.26	163.61.85.23