City: unknown
Region: unknown
Country: United States
Internet Service Provider: 1&1 Internet Inc.
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | lfd: (smtpauth) Failed SMTP AUTH login from 74.208.214.48 (US/United States/-): 5 in the last 3600 secs - Sat Jul 7 10:13:51 2018 |
2020-02-07 05:59:24 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 74.208.214.168 | attackbots | Apr 24 11:50:52 zimbra sshd[726]: Invalid user vagrant from 74.208.214.168 Apr 24 11:50:52 zimbra sshd[726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.214.168 Apr 24 11:50:54 zimbra sshd[726]: Failed password for invalid user vagrant from 74.208.214.168 port 42396 ssh2 Apr 24 11:50:54 zimbra sshd[726]: Received disconnect from 74.208.214.168 port 42396:11: Bye Bye [preauth] Apr 24 11:50:54 zimbra sshd[726]: Disconnected from 74.208.214.168 port 42396 [preauth] Apr 24 12:02:12 zimbra sshd[9582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.214.168 user=r.r Apr 24 12:02:14 zimbra sshd[9582]: Failed password for r.r from 74.208.214.168 port 51408 ssh2 Apr 24 12:02:14 zimbra sshd[9582]: Received disconnect from 74.208.214.168 port 51408:11: Bye Bye [preauth] Apr 24 12:02:14 zimbra sshd[9582]: Disconnected from 74.208.214.168 port 51408 [preauth] Apr 24 12:07:32 zimbra ssh........ ------------------------------- |
2020-04-25 01:05:44 |
| 74.208.214.205 | attackbotsspam | Feb 25 03:30:21 vpn sshd[4999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.214.205 Feb 25 03:30:23 vpn sshd[4999]: Failed password for invalid user monitor from 74.208.214.205 port 50866 ssh2 Feb 25 03:36:35 vpn sshd[5045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.214.205 |
2020-01-05 15:14:44 |
| 74.208.214.205 | attack | Apr 20 04:41:46 ubuntu sshd[20370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.214.205 Apr 20 04:41:48 ubuntu sshd[20370]: Failed password for invalid user win from 74.208.214.205 port 43668 ssh2 Apr 20 04:44:05 ubuntu sshd[21316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.214.205 |
2019-08-01 11:55:48 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.208.214.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58700
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;74.208.214.48. IN A
;; AUTHORITY SECTION:
. 164 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020601 1800 900 604800 86400
;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 05:59:21 CST 2020
;; MSG SIZE rcvd: 117Host 48.214.208.74.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.214.208.74.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.35.21.151 | attackbots | Automatic report - Port Scan Attack |
2019-08-09 21:21:15 |
| 94.191.20.179 | attackspam | Automatic report - Banned IP Access |
2019-08-09 20:55:34 |
| 112.85.42.189 | attack | Triggered by Fail2Ban at Vostok web server |
2019-08-09 21:42:34 |
| 107.170.197.221 | attack | [MySQL inject/portscan] tcp/3306 *(RWIN=65535)(08091022) |
2019-08-09 20:59:42 |
| 203.114.102.69 | attackspambots | Aug 9 12:25:49 bouncer sshd\[30717\]: Invalid user user1 from 203.114.102.69 port 58526 Aug 9 12:25:49 bouncer sshd\[30717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.114.102.69 Aug 9 12:25:51 bouncer sshd\[30717\]: Failed password for invalid user user1 from 203.114.102.69 port 58526 ssh2 ... |
2019-08-09 21:01:29 |
| 104.236.37.149 | attackbotsspam | xmlrpc attack |
2019-08-09 21:35:19 |
| 101.81.163.161 | attackbots | FTP/21 MH Probe, BF, Hack - |
2019-08-09 21:28:40 |
| 23.254.142.160 | attackspambots | xmlrpc attack |
2019-08-09 21:10:52 |
| 154.0.164.181 | attackspam | xmlrpc attack |
2019-08-09 21:04:57 |
| 184.168.193.140 | attackbotsspam | xmlrpc attack |
2019-08-09 21:03:58 |
| 160.153.156.141 | attackbotsspam | xmlrpc attack |
2019-08-09 21:09:33 |
| 176.31.253.55 | attack | Aug 9 13:43:12 SilenceServices sshd[17526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.253.55 Aug 9 13:43:14 SilenceServices sshd[17526]: Failed password for invalid user mark1 from 176.31.253.55 port 36840 ssh2 Aug 9 13:47:12 SilenceServices sshd[20571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.253.55 |
2019-08-09 21:04:25 |
| 35.231.184.199 | attack | xmlrpc attack |
2019-08-09 21:38:26 |
| 45.67.14.151 | attackspambots | Aug 9 08:57:38 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=45.67.14.151 DST=172.31.1.100 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=3478 PROTO=TCP SPT=58529 DPT=3398 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-08-09 21:02:30 |
| 141.98.80.74 | attackbotsspam | smtp attack |
2019-08-09 21:24:45 |