JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

208.74.191.71

Recent Activity

Abuse Confidence Score

51% Elevated

18 reports

14 reporters · latest 2 days ago

ISP: CLGW
Usage Type: Fixed Line ISP
ASN: AS395944
Domain Name: clgw.net
Country: 🇺🇸 United States of America
City: Kennett, Missouri

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

18 from 14 distinct reporters

First reported

June 20th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇮🇩 Indonesia 2 🇳🇱 Netherlands 2

Most common categories Web App Attack 5 Bad Web Bot 4 Brute-Force 4 Hacking 3 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-11-10 04:03:01 UTC · (2 days ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇦🇺 MAGIC	2026-11-09 03:03:19 UTC · (4 days ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 maxxsense	2026-11-06 06:55:46 UTC · (6 days ago)	208.74.191.71 (US/United States/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
🇺🇸 TTWebhosting	2026-11-06 01:28:39 UTC · (1 week ago)	(imapd) Failed IMAP login from 208.74.191.71 (US/United States/Missouri/Kennett/-/[AS395944 CLGW]): 2 in the last 3600 secs	Brute-Force Port Scan Hacking
🇩🇪 FeG Deutschland	2026-11-05 06:08:20 UTC · (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇵🇹 PT	2026-10-31 10:58:29 UTC · (1 week ago)	web app attack (botnet)	DDoS Attack Web App Attack
🇳🇱 Mangelot Hosting	2026-10-30 15:59:38 UTC · (1 week ago)	(dovecot_invalid_user) srv103 Dovecot login on non-existent account 208.74.191.71 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 30 16:59:35 dovecot[2913478]: imap-login: Login aborted: ... show more (dovecot_invalid_user) srv103 Dovecot login on non-existent account 208.74.191.71 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 30 16:59:35 dovecot[2913478]: imap-login: Login aborted: Logged out (auth failed, 2 attempts in 9 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=208.74.191.71, lip=0.0.0.x, TLS, session=<0ctm4RBfHovQSr9H> show less	Web App Attack
🇿🇦 maximonline.co.za	2026-10-27 12:40:18 UTC · (2 weeks ago)	Brute Force IMAP AUTH Attack	Brute-Force
🇺🇸 鬼影233	2026-09-28 09:49:04 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇮🇩 sockominfo	2026-09-27 04:00:53 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 208.74.191.71. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishi ... show more Email: Login failures from Bad Reputation IP: 208.74.191.71. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-27 03:00:52 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 208.74.191.71. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishi ... show more Email: Login failures from Bad Reputation IP: 208.74.191.71. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 鬼影233	2026-09-24 05:45:04 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0	Bad Web Bot
🇮🇹 Inartis	2026-09-16 18:16:35 UTC · (1 month ago)	2026-09-16T20:16:35.026479+02:00 mail dovecot: pop3-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 14 secs): user=<[email protected]>, method=PLAIN, rip=208.74.191.71, lip=93.39.247.175, TLS, session=<NeMNqp1bEIn ... show more 2026-09-16T20:16:35.026479+02:00 mail dovecot: pop3-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 14 secs): user=<[email protected]>, method=PLAIN, rip=208.74.191.71, lip=93.39.247.175, TLS, session=<NeMNqp1bEInQSr9H> 2026-09-16T20:16:35.026479+02:00 mail dovecot: pop3-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 14 secs): user=<[email protected]>, method=PLAIN, rip=208.74.191.71, lip=93.39.247.175, TLS, session=<NeMNqp1bEInQSr9H> ... show less	Port Scan Brute-Force
🇫🇷 vtchost.com	2026-09-13 13:32:17 UTC · (1 month ago)	requested HTTP honeypot page - ignored robots.txt - bad crawler ...	Bad Web Bot Exploited Host
🇮🇩 sockominfo	2026-09-12 00:00:11 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 208.74.191.71. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.118

🇬🇧 193.163.125.100

🇺🇦 176.105.204.190

🇳🇱 160.119.76.173

🇺🇸 153.66.111.2

🇻🇳 123.31.31.125

🇬🇧 98.159.234.177

🇮🇪 64.43.152.97

🇳🇱 45.140.222.146

🇺🇸 34.162.0.79

🇺🇸 206.189.228.97

🇺🇸 204.48.21.177

🇨🇭 179.43.158.119

🇫🇮 172.83.252.217

🇳🇱 138.226.239.234

🇫🇷 80.87.206.153

🇺🇸 72.215.46.209

🇳🇱 45.148.10.152

🇬🇧 35.203.211.95

🇩🇪 2a14:c380:1300:5a::a