74.134.53.109 - IPInfo

Basic Info

City: Somerset

Region: Kentucky

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.134.53.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;74.134.53.109.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022041700 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 17 16:21:20 CST 2022
;; MSG SIZE  rcvd: 106

Host info

109.53.134.74.in-addr.arpa domain name pointer cpe-74-134-53-109.kya.res.rr.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
109.53.134.74.in-addr.arpa	name = cpe-74-134-53-109.kya.res.rr.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.47.43.131	attack	Fail2Ban Ban Triggered	2019-08-12 07:04:15
189.59.33.140	attack	Lines containing failures of 189.59.33.140 Aug 9 14:30:13 server-name sshd[15159]: Invalid user as from 189.59.33.140 port 52304 Aug 9 14:30:13 server-name sshd[15159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.59.33.140 Aug 9 14:30:16 server-name sshd[15159]: Failed password for invalid user as from 189.59.33.140 port 52304 ssh2 Aug 9 14:30:16 server-name sshd[15159]: Received disconnect from 189.59.33.140 port 52304:11: Bye Bye [preauth] Aug 9 14:30:16 server-name sshd[15159]: Disconnected from invalid user as 189.59.33.140 port 52304 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=189.59.33.140	2019-08-12 07:37:24
189.45.11.181	attack	445/tcp 445/tcp 445/tcp [2019-06-29/08-11]3pkt	2019-08-12 07:31:54
119.252.172.58	attackspam	445/tcp 445/tcp [2019-07-07/08-11]2pkt	2019-08-12 07:17:45
91.121.164.131	attack	Aug 12 01:28:49 server01 sshd\[30001\]: Invalid user nagios from 91.121.164.131 Aug 12 01:28:49 server01 sshd\[30001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.164.131 Aug 12 01:28:51 server01 sshd\[30001\]: Failed password for invalid user nagios from 91.121.164.131 port 33892 ssh2 ...	2019-08-12 06:54:44
12.178.187.9	attackspam	Automatic report - Port Scan Attack	2019-08-12 07:15:50
112.85.42.178	attackbots	SSH-BruteForce	2019-08-12 07:03:44
220.134.144.96	attack	Aug 12 02:17:32 yabzik sshd[25218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.144.96 Aug 12 02:17:34 yabzik sshd[25218]: Failed password for invalid user hack from 220.134.144.96 port 46476 ssh2 Aug 12 02:22:26 yabzik sshd[26764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.144.96	2019-08-12 07:28:39
193.112.191.228	attackbots	Aug 11 22:08:40 MK-Soft-Root2 sshd\[18951\]: Invalid user isaac from 193.112.191.228 port 52514 Aug 11 22:08:40 MK-Soft-Root2 sshd\[18951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.191.228 Aug 11 22:08:43 MK-Soft-Root2 sshd\[18951\]: Failed password for invalid user isaac from 193.112.191.228 port 52514 ssh2 ...	2019-08-12 07:16:38
185.220.101.44	attackspambots	Aug 12 00:29:22 arianus sshd\[2375\]: Unable to negotiate with 185.220.101.44 port 38794: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ...	2019-08-12 06:58:31
178.54.69.58	attack	445/tcp 445/tcp [2019-07-30/08-11]2pkt	2019-08-12 07:22:10
8.8.4.4	attackspambots	Aug 11 20:22:49 mail kernel: [295965.272612] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=8.8.4.4 DST=77.73.69.240 LEN=119 TOS=0x00 PREC=0x00 TTL=110 ID=55041 PROTO=UDP SPT=53 DPT=32830 LEN=99 Aug 11 20:22:49 mail kernel: [295965.272654] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=8.8.4.4 DST=77.73.69.240 LEN=95 TOS=0x00 PREC=0x00 TTL=110 ID=11630 PROTO=UDP SPT=53 DPT=32830 LEN=75 ...	2019-08-12 07:23:08
58.221.91.74	attack	Aug 11 19:19:45 TORMINT sshd\[25342\]: Invalid user zebra1234 from 58.221.91.74 Aug 11 19:19:45 TORMINT sshd\[25342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.221.91.74 Aug 11 19:19:47 TORMINT sshd\[25342\]: Failed password for invalid user zebra1234 from 58.221.91.74 port 59627 ssh2 ...	2019-08-12 07:21:38
170.0.125.102	attack	Email spam. Multiple attempts to send e-mail from invalid/unknown sender domain. Date: 2019 Aug 11. 18:18:25 Source IP: 170.0.125.102 Portion of the log(s): Aug 11 18:18:25 vserv postfix/smtpd[3358]: NOQUEUE: reject: RCPT from 102-125-0-170.castelecom.com.br[170.0.125.102]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<rr9@[removed].at> proto=ESMTP helo=<102-125-0-170.castelecom.com.br> Aug 11 18:18:24 vserv postfix/smtpd[3358]: NOQUEUE: reject: RCPT from 102-125-0-170.castelecom.com.br[170.0.125.102]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=<rr8@[removed].at> proto=ESMTP helo=<102-125-0-170.castelecom.com.br> Aug 11 18:18:24 vserv postfix/smtpd[3358]: NOQUEUE: reject: RCPT from 102-125-0-170.castelecom.com.br[170.0.125.102]: 450 4.1.8 : Sender address rejected ....	2019-08-12 06:55:34
42.83.84.90	attackbots	445/tcp 445/tcp 445/tcp [2019-06-23/08-11]3pkt	2019-08-12 07:14:44

Recently Reported IPs

237.155.114.96	88.151.147.158	197.37.153.143	209.8.71.23
178.131.31.188	50.97.141.242	109.141.13.241	20.125.22.144
198.108.30.167	215.224.165.196	238.57.115.7	242.240.114.101
50.102.196.123	134.85.251.92	248.250.28.203	56.39.241.48
69.184.203.137	169.112.93.253	184.148.240.228	128.174.200.13