AbuseIPDB » 104.192.3.74

Check an IP Address, Domain Name, or Subnet

e.g. 44.200.168.16, microsoft.com, or 5.188.10.0/24

104.192.3.74 was found in our database!

This IP was reported 1,310 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	DataWagon LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	this-is-a-tor-exit
Domain Name	datawagon.net
Country	United States of America
City	Rye, New York

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.192.3.74

Whois 104.192.3.74

IP Abuse Reports for 104.192.3.74:

This IP address has been reported a total of 1,310 times from 240 distinct sources. 104.192.3.74 was first reported on September 23rd 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Smel	2 hours ago	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
oncord	3 hours ago	Form spam	Web Spam
octageeks.com	11 hours ago	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
koji	18 hours ago		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
websase.com	30 Mar 2023	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
Jim Keir	30 Mar 2023	2023-03-30 08:20:26 104.192.3.74 File scanning, blocking 104.192.3.74 for 5 minutes	Web App Attack
psauxit	30 Mar 2023	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show moreFail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
Anonymous	30 Mar 2023	www.goldgier.de 104.192.3.74 [30/Mar/2023:04:04:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5801 "-" " ... show morewww.goldgier.de 104.192.3.74 [30/Mar/2023:04:04:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" www.goldgier.de 104.192.3.74 [30/Mar/2023:04:04:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" show less	Web App Attack
koji	29 Mar 2023		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
ozisp.com.au	29 Mar 2023	US_DataWagon_<33>1680121654 [1:2522002:5114] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traff ... show moreUS_DataWagon_<33>1680121654 [1:2522002:5114] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 3 [Classification: Misc Attack] [Priority: 2] {TCP} 104.192.3.74:41648 show less	Open Proxy
oncord	29 Mar 2023	Form spam	Web Spam
ghostwarriors	29 Mar 2023	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
secureme	29 Mar 2023	...	Web App Attack
octageeks.com	29 Mar 2023	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
Anonymous	29 Mar 2023	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show moreAttacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack