This IP address has been reported a total of
31
times from
19 distinct
sources.
74.208.53.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-11T10:19:53.170784+02:00 janus sshd[3964556]: Invalid user jiayin from 74.208.53.99 port 386 ...
show more2026-06-11T10:19:53.170784+02:00 janus sshd[3964556]: Invalid user jiayin from 74.208.53.99 port 38614
2026-06-11T10:19:53.182509+02:00 janus sshd[3964556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
2026-06-11T10:19:55.371870+02:00 janus sshd[3964556]: Failed password for invalid user jiayin from 74.208.53.99 port 38614 ssh2
2026-06-11T10:21:57.991861+02:00 janus sshd[3964787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99 user=root
2026-06-11T10:21:59.870762+02:00 janus sshd[3964787]: Failed password for root from 74.208.53.99 port 37954 ssh2
...
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-libssh_0.9.6
show less
Jun 11 04:24:45 proxy-03 sshd[2899436]: Invalid user meteo from 74.208.53.99 port 36780
Jun 11 04:24 ...
show moreJun 11 04:24:45 proxy-03 sshd[2899436]: Invalid user meteo from 74.208.53.99 port 36780
Jun 11 04:24:45 proxy-03 sshd[2899436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
Jun 11 04:24:47 proxy-03 sshd[2899436]: Failed password for invalid user meteo from 74.208.53.99 port 36780 ssh2
Jun 11 04:24:45 proxy-03 sshd[2899436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
Jun 11 04:24:47 proxy-03 sshd[2899436]: Failed password for invalid user meteo from 74.208.53.99 port 36780 ssh2
...
show less
Jun 11 03:48:46 proxy-03 sshd[2838032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJun 11 03:48:46 proxy-03 sshd[2838032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
Jun 11 03:48:49 proxy-03 sshd[2838032]: Failed password for invalid user rector from 74.208.53.99 port 43104 ssh2
Jun 11 03:50:50 proxy-03 sshd[2840790]: Invalid user ipsi from 74.208.53.99 port 55748
Jun 11 03:50:50 proxy-03 sshd[2840790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
Jun 11 03:50:52 proxy-03 sshd[2840790]: Failed password for invalid user ipsi from 74.208.53.99 port 55748 ssh2
...
show less
Jun 11 00:38:20 digamma sshd[155214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 11 00:38:20 digamma sshd[155214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
Jun 11 00:38:22 digamma sshd[155214]: Failed password for invalid user polymer from 74.208.53.99 port 50692 ssh2
Jun 11 00:48:40 digamma sshd[155351]: Invalid user rector from 74.208.53.99 port 46276
...
show less
2026-06-11T08:39:06.542322+02:00 jantje sshd[6780]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-06-11T08:39:06.542322+02:00 jantje sshd[6780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.53.99
2026-06-11T08:39:08.251366+02:00 jantje sshd[6780]: Failed password for invalid user polymer from 74.208.53.99 port 34372 ssh2
2026-06-11T08:39:09.549342+02:00 jantje sshd[6780]: Disconnected from invalid user polymer 74.208.53.99 port 34372 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 11 14:25:55 vm50 sshd[71055]: Invalid user systems from 74.208.53.99 port 49854
Jun 11 14:25:55 ...
show moreJun 11 14:25:55 vm50 sshd[71055]: Invalid user systems from 74.208.53.99 port 49854
Jun 11 14:25:55 vm50 sshd[71055]: Disconnected from invalid user systems 74.208.53.99 port 49854 [preauth]
Jun 11 14:28:09 vm50 sshd[71075]: Disconnected from authenticating user root 74.208.53.99 port 37620 [preauth]
Jun 11 14:30:26 vm50 sshd[71087]: Disconnected from authenticating user root 74.208.53.99 port 38848 [preauth]
Jun 11 14:32:39 vm50 sshd[71093]: Disconnected from authenticating user root 74.208.53.99 port 58716 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 11 14:10:26 vm50 sshd[70952]: Disconnected from authenticating user root 74.208.53.99 port 50340 ...
show moreJun 11 14:10:26 vm50 sshd[70952]: Disconnected from authenticating user root 74.208.53.99 port 50340 [preauth]
Jun 11 14:12:37 vm50 sshd[70959]: Connection from 74.208.53.99 port 34440 on 103.3.61.195 port 22 rdomain ""
Jun 11 14:12:38 vm50 sshd[70959]: Invalid user core from 74.208.53.99 port 34440
Jun 11 14:12:38 vm50 sshd[70959]: Disconnected from invalid user core 74.208.53.99 port 34440 [preauth]
Jun 11 14:14:49 vm50 sshd[70961]: Disconnected from authenticating user root 74.208.53.99 port 45354 [preauth]
...
show less
(sshd) Failed SSH login from 74.208.53.99 (US/United States/-): 5 in the last 3600 secs; Ports: *; D ...
show more(sshd) Failed SSH login from 74.208.53.99 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 11 07:22:31 da057 sshd[3005102]: Invalid user jeff from 74.208.53.99 port 58300
Jun 11 07:48:53 da057 sshd[3037473]: Invalid user luo from 74.208.53.99 port 38802
Jun 11 07:51:01 da057 sshd[3041799]: Invalid user ts3server from 74.208.53.99 port 45424
Jun 11 07:59:48 da057 sshd[3052467]: Invalid user demo1 from 74.208.53.99 port 36170
Jun 11 08:01:56 da057 sshd[3056071]: Invalid user asag from 74.208.53.99 port 36934
show less
Port Scan
Showing 1 to
15
of 31 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩