74.207.252.20
Classification: Malicious
74.207.252.20 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-21. Network: AS63949 Linode.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- IoT threat — Seen attacking IoT devices.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2023-11-18 14:02:08 | 2026-08-21 09:07:44 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2023-11-18 14:01:59 | 2026-08-21 09:07:42 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2023-11-18 08:29:40 | 2026-08-20 20:01:32 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-05-15 22:22:14 | 2026-06-03 22:03:37 | compromised malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-05-15 23:05:23 | 2026-05-28 14:07:07 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-05-15 23:05:23 | 2026-05-28 14:07:07 | malicious-activity | |
| Hacking | AbuseIPDB | 2026-05-15 22:22:14 | 2026-05-28 14:07:07 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-05-15 21:50:12 | 2026-05-28 08:25:42 | anomalous-activity | |
| HTTP Attacker | AbuseIPDB | 2026-05-17 20:03:33 | 2026-05-27 09:30:09 | malicious-activity | |
| Proxy | AbuseIPDB | 2026-05-27 04:22:07 | 2026-05-27 04:22:07 | anonymization | |
| HTTP Scrapper | AbuseIPDB | 2026-05-19 02:18:22 | 2026-05-24 04:52:31 | anomalous-activity | |
| DDoS Attacker | AbuseIPDB | 2026-05-20 23:09:35 | 2026-05-20 23:25:43 | malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-05-20 23:09:35 | 2026-05-20 23:25:43 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-05-16 00:06:53 | 2026-05-16 00:06:53 | anomalous-activity | |
| Mail Spammer | Abuseat.org | 2023-11-18 08:29:40 | 2023-11-18 08:29:40 |
Whois information
- AS name
- AS63949 Linode
- AS registry
- arin
- AS date
- 2009-01-14 00:00:00
- AS CIDR
- 74.207.240.0/20
- CIDR
- 74.207.224.0/19
- Registrant
- Linode
- Address
- 145 Broadway
- City
- Fremont
- State
- CA
- Postal code
- 94536
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2023-11-18 08:29:40
- Last updated
- 2026-08-21 09:08:04
Malicious IPs in the same CIDR
74.207.240.7 74.207.253.22 74.207.253.160 74.207.240.85 74.207.240.187 74.207.254.27 74.207.254.19 74.207.247.70 74.207.252.20