204.74.208.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
204.74.208.130	attackspambots	[portscan] tcp/1433 [MsSQL] [scan/connect: 2 time(s)] *(RWIN=8192)(04301449)	2020-05-01 01:24:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.74.208.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4300
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;204.74.208.21.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024111701 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 18 07:24:09 CST 2024
;; MSG SIZE  rcvd: 106

Host info

21.208.74.204.in-addr.arpa domain name pointer 204-74-208-21.genericreverse.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.208.74.204.in-addr.arpa	name = 204-74-208-21.genericreverse.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.129.33.22	attackbotsspam	firewall-block, port(s): 25424/tcp, 25429/tcp, 25435/tcp, 25440/tcp, 25450/tcp, 25465/tcp	2020-07-27 01:32:21
45.129.33.9	attackspam	TCP (SYN) 45.129.33.9:58636 -> port 3848, len 44	2020-07-27 01:49:23
164.163.25.213	attackspam	DATE:2020-07-26 14:02:45, IP:164.163.25.213, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-07-27 01:28:01
74.65.122.76	attackspam	SSH/22 MH Probe, BF, Hack -	2020-07-27 01:51:21
165.22.224.88	attackspambots	Jul 26 17:24:01 h2646465 sshd[15250]: Invalid user tsunoda from 165.22.224.88 Jul 26 17:24:01 h2646465 sshd[15250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.224.88 Jul 26 17:24:01 h2646465 sshd[15250]: Invalid user tsunoda from 165.22.224.88 Jul 26 17:24:03 h2646465 sshd[15250]: Failed password for invalid user tsunoda from 165.22.224.88 port 46670 ssh2 Jul 26 17:34:03 h2646465 sshd[16550]: Invalid user ami from 165.22.224.88 Jul 26 17:34:03 h2646465 sshd[16550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.224.88 Jul 26 17:34:03 h2646465 sshd[16550]: Invalid user ami from 165.22.224.88 Jul 26 17:34:05 h2646465 sshd[16550]: Failed password for invalid user ami from 165.22.224.88 port 39338 ssh2 Jul 26 17:39:40 h2646465 sshd[17254]: Invalid user sanket from 165.22.224.88 ...	2020-07-27 01:58:07
2a02:c7f:6454:8200:691b:7b0a:d62d:42c7	attack	Attempting to access Wordpress login on a honeypot or private system.	2020-07-27 01:56:49
197.41.86.40	attack	TCP (SYN) 197.41.86.40:54031 -> port 23, len 44	2020-07-27 01:46:43
106.13.167.77	attack	2020-07-26T14:58:48.939775afi-git.jinr.ru sshd[8206]: Invalid user liuqiang from 106.13.167.77 port 47902 2020-07-26T14:58:48.942951afi-git.jinr.ru sshd[8206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.167.77 2020-07-26T14:58:48.939775afi-git.jinr.ru sshd[8206]: Invalid user liuqiang from 106.13.167.77 port 47902 2020-07-26T14:58:51.187806afi-git.jinr.ru sshd[8206]: Failed password for invalid user liuqiang from 106.13.167.77 port 47902 ssh2 2020-07-26T15:02:39.959042afi-git.jinr.ru sshd[9234]: Invalid user testftp from 106.13.167.77 port 41742 ...	2020-07-27 01:47:59
41.38.183.209	attackbots	Unauthorized connection attempt from IP address 41.38.183.209 on Port 445(SMB)	2020-07-27 01:38:15
185.250.220.170	attackbots	Jul 26 17:43:09 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.250.220.170 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=51157 PROTO=TCP SPT=58076 DPT=8088 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 18:18:34 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.250.220.170 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=62074 PROTO=TCP SPT=58076 DPT=8070 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 19:14:35 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.250.220.170 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=4469 PROTO=TCP SPT=58076 DPT=83 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 19:18:05 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=185.250.220.170 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=94 PROTO=TCP SPT=58076 DPT=8010 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 26 19:23:13 hidden k ...	2020-07-27 01:25:22
75.186.80.32	attackbots	SSH/22 MH Probe, BF, Hack -	2020-07-27 01:40:35
52.221.194.38	attackbotsspam	52.221.194.38 - - [26/Jul/2020:14:01:48 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.221.194.38 - - [26/Jul/2020:14:02:18 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.221.194.38 - - [26/Jul/2020:14:02:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-27 01:33:20
196.221.205.61	attack	20/7/26@08:02:34: FAIL: Alarm-Network address from=196.221.205.61 20/7/26@08:02:34: FAIL: Alarm-Network address from=196.221.205.61 ...	2020-07-27 01:55:06
89.96.237.35	attackbots	Unauthorized connection attempt from IP address 89.96.237.35 on Port 445(SMB)	2020-07-27 01:56:11
35.200.183.13	attackspam	Jul 26 12:09:26 XXXXXX sshd[54709]: Invalid user teamspeak from 35.200.183.13 port 34332	2020-07-27 01:54:31

Recently Reported IPs

16.89.148.183	248.134.205.32	147.175.114.61	70.75.11.119
42.97.163.31	78.2.253.112	214.51.39.28	253.220.0.95
239.193.121.13	147.196.60.145	4.86.134.51	119.7.247.201
226.185.187.165	67.208.250.137	249.40.132.55	253.184.198.144
172.58.150.245	181.154.131.193	44.207.127.0	201.89.170.144