Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Germantown

Region: Tennessee

Country: United States

Internet Service Provider: AT&T

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.4.74.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45749
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;172.4.74.9.			IN	A

;; AUTHORITY SECTION:
.			578	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022070200 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 02 16:15:23 CST 2022
;; MSG SIZE  rcvd: 103
Host info
9.74.4.172.in-addr.arpa domain name pointer 172-4-74-9.lightspeed.mmphtn.sbcglobal.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
9.74.4.172.in-addr.arpa	name = 172-4-74-9.lightspeed.mmphtn.sbcglobal.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
159.203.161.141 attackspam
Feb  8 13:41:06 tor-proxy-04 sshd\[26186\]: User root from 159.203.161.141 not allowed because not listed in AllowUsers
Feb  8 13:41:42 tor-proxy-04 sshd\[26190\]: User root from 159.203.161.141 not allowed because not listed in AllowUsers
Feb  8 13:42:18 tor-proxy-04 sshd\[26194\]: User root from 159.203.161.141 not allowed because not listed in AllowUsers
...
2020-02-08 20:44:49
13.66.139.0 attack
Automatic report - Banned IP Access
2020-02-08 20:47:57
51.83.106.0 attackspambots
Feb  8 08:52:23 MK-Soft-Root2 sshd[30791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.106.0 
Feb  8 08:52:25 MK-Soft-Root2 sshd[30791]: Failed password for invalid user xbx from 51.83.106.0 port 56590 ssh2
...
2020-02-08 20:41:16
198.108.67.53 attackbots
Port 10036 scan denied
2020-02-08 20:20:29
176.48.61.34 attack
20/2/7@23:49:51: FAIL: Alarm-Network address from=176.48.61.34
...
2020-02-08 20:32:30
217.182.77.186 attackbots
Feb  8 04:52:39 server sshd\[8580\]: Invalid user hbb from 217.182.77.186
Feb  8 04:52:40 server sshd\[8580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.ip-217-182-77.eu 
Feb  8 04:52:41 server sshd\[8580\]: Failed password for invalid user hbb from 217.182.77.186 port 43404 ssh2
Feb  8 11:06:34 server sshd\[2550\]: Invalid user pkr from 217.182.77.186
Feb  8 11:06:34 server sshd\[2550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.ip-217-182-77.eu 
...
2020-02-08 20:26:06
134.175.85.79 attack
Feb  8 13:39:01 sd-53420 sshd\[31176\]: Invalid user hxa from 134.175.85.79
Feb  8 13:39:01 sd-53420 sshd\[31176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.85.79
Feb  8 13:39:02 sd-53420 sshd\[31176\]: Failed password for invalid user hxa from 134.175.85.79 port 37934 ssh2
Feb  8 13:42:32 sd-53420 sshd\[31707\]: Invalid user kwy from 134.175.85.79
Feb  8 13:42:32 sd-53420 sshd\[31707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.85.79
...
2020-02-08 20:52:42
24.119.8.220 attack
Honeypot attack, port: 81, PTR: 24-119-8-220.cpe.sparklight.net.
2020-02-08 20:43:35
218.92.0.145 attack
Tried sshing with brute force.
2020-02-08 20:52:12
13.79.245.192 attackspam
Lines containing failures of 13.79.245.192
Feb  5 02:26:59 HOSTNAME sshd[29980]: User r.r from 13.79.245.192 not allowed because not listed in AllowUsers
Feb  5 02:26:59 HOSTNAME sshd[29980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.79.245.192  user=r.r
Feb  5 02:27:01 HOSTNAME sshd[29980]: Failed password for invalid user r.r from 13.79.245.192 port 60348 ssh2
Feb  5 02:27:01 HOSTNAME sshd[29980]: Received disconnect from 13.79.245.192 port 60348:11: Bye Bye [preauth]
Feb  5 02:27:01 HOSTNAME sshd[29980]: Disconnected from 13.79.245.192 port 60348 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.79.245.192
2020-02-08 21:00:53
213.194.174.194 attack
Automatic report - Port Scan Attack
2020-02-08 20:43:55
182.237.116.150 attack
Honeypot attack, port: 5555, PTR: PTR record not found
2020-02-08 20:21:05
167.114.226.137 attackbotsspam
2020-2-8 11:35:26 AM: failed ssh attempt
2020-02-08 20:24:29
46.101.98.86 attack
3x Failed Password
2020-02-08 20:53:40
106.241.16.105 attackbots
2020-2-8 11:32:43 AM: failed ssh attempt
2020-02-08 20:27:50

Recently Reported IPs

116.8.114.137 116.8.114.213 119.234.37.153 114.42.57.23
116.8.114.97 114.97.85.130 119.28.29.124 115.21.114.169
115.224.21.45 116.1.7.184 115.133.122.119 115.147.41.198
116.1.7.82 116.8.114.234 116.8.115.5 116.1.7.138
116.8.114.126 118.200.216.53 114.99.22.65 114.233.218.43