JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.149.165.66

Neutral Activity

Abuse confidence score ?

0% Low Risk

309 reports

114 reporters · latest 4 years ago

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.149.165.66 has been reported 309 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 104.149.165.66

Export CSV

This IP address has been reported a total of 309 times from 114 distinct sources. 104.149.165.66 was first reported on August 21st 2021, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 pufferfishenjoyer	2022-02-28 23:12:09 (4 years ago)	IP caught from endlessh tarpit logs	Brute-Force SSH
🇵🇱 ChillScanner	2022-02-28 22:39:12 (4 years ago)	3 probe(s) @ TCP(22)	Port Scan
🇪🇸 Teapot	2022-02-28 20:11:00 (4 years ago)	2022-02-28T21:11:54.816397correo.[domain] sshd[20670]: Failed password for root from 104.149.165.66 ... show more 2022-02-28T21:11:54.816397correo.[domain] sshd[20670]: Failed password for root from 104.149.165.66 port 33886 ssh2 2022-02-28T21:11:56.131200correo.[domain] sshd[20674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root 2022-02-28T21:11:58.207401correo.[domain] sshd[20674]: Failed password for root from 104.149.165.66 port 42734 ssh2 ... show less	Brute-Force SSH
Anonymous	2022-02-28 18:22:23 (4 years ago)	Mar 1 00:22:15 rotator sshd\[18215\]: Address 104.149.165.66 maps to unassigned.psychz.net, but thi ... show more Mar 1 00:22:15 rotator sshd\[18215\]: Address 104.149.165.66 maps to unassigned.psychz.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Mar 1 00:22:17 rotator sshd\[18215\]: Failed password for root from 104.149.165.66 port 34710 ssh2Mar 1 00:22:19 rotator sshd\[18217\]: Address 104.149.165.66 maps to unassigned.psychz.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Mar 1 00:22:21 rotator sshd\[18217\]: Failed password for root from 104.149.165.66 port 46158 ssh2Mar 1 00:22:23 rotator sshd\[18220\]: Address 104.149.165.66 maps to unassigned.psychz.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ... show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2022-02-28 18:22:08 (4 years ago)	Lines containing failures of 104.149.165.66 (max 1000) Feb 28 19:38:41 nextcloud sshd[1473972]: pam_ ... show more Lines containing failures of 104.149.165.66 (max 1000) Feb 28 19:38:41 nextcloud sshd[1473972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:43 nextcloud sshd[1473972]: Failed password for r.r from 104.149.165.66 port 39772 ssh2 Feb 28 19:38:44 nextcloud sshd[1473972]: Connection closed by authenticating user r.r 104.149.165.66 port 39772 [preauth] Feb 28 19:38:45 nextcloud sshd[1473976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:47 nextcloud sshd[1473976]: Failed password for r.r from 104.149.165.66 port 46036 ssh2 Feb 28 19:38:49 nextcloud sshd[1473976]: Connection closed by authenticating user r.r 104.149.165.66 port 46036 [preauth] Feb 28 19:38:50 nextcloud sshd[1473995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:52 nextcl........ ------------------------------ show less	FTP Brute-Force Hacking
🇬🇧 SecondEdge	2022-02-28 17:56:24 (4 years ago)	SSH brute-force: detected 1 distinct username(s) / 422 distinct password(s) within a 24-hour window.	Brute-Force SSH
🇫🇷 substantiu.com	2022-02-28 17:55:13 (4 years ago)	SSH login attempts with user root.	Brute-Force SSH
🇫🇷 dsl	2022-02-28 17:54:06 (4 years ago)	Feb 28 23:54:01 controldedominiosdg sshd[13989]: pam_unix(sshd:auth): authentication failure; lognam ... show more Feb 28 23:54:01 controldedominiosdg sshd[13989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 23:54:03 controldedominiosdg sshd[13989]: Failed password for root from 104.149.165.66 port 49436 ssh2 Feb 28 23:54:04 controldedominiosdg sshd[13999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 23:54:06 controldedominiosdg sshd[13999]: Failed password for root from 104.149.165.66 port 58812 ssh2 ... show less	Brute-Force SSH
🇫🇷 mediacenter	2022-02-28 17:41:46 (4 years ago)	brute-force attack (reported by fail2ban)	Brute-Force SSH
🇬🇧 connorw600	2022-02-28 17:31:05 (4 years ago)	Feb 28 22:30:54 ubuntu-srv-1 sshd[464838]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Feb 28 22:30:54 ubuntu-srv-1 sshd[464838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 22:30:57 ubuntu-srv-1 sshd[464838]: Failed password for root from 104.149.165.66 port 45900 ssh2 Feb 28 22:30:58 ubuntu-srv-1 sshd[464844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 22:31:01 ubuntu-srv-1 sshd[464844]: Failed password for root from 104.149.165.66 port 54260 ssh2 Feb 28 22:30:58 ubuntu-srv-1 sshd[464842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 22:31:01 ubuntu-srv-1 sshd[464842]: Failed password for root from 104.149.165.66 port 53988 ssh2 Feb 28 22:31:02 ubuntu-srv-1 sshd[464851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 22:31:04 ubuntu-srv-1 sshd[464851]: Failed password f ... show less	Brute-Force SSH
🇺🇦 Alexey Aseev	2022-02-28 17:27:56 (4 years ago)	Mar 1 00:27:44 gw sshd\[1172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid ... show more Mar 1 00:27:44 gw sshd\[1172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Mar 1 00:27:45 gw sshd\[1172\]: Failed password for root from 104.149.165.66 port 55038 ssh2 Mar 1 00:27:47 gw sshd\[1174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Mar 1 00:27:49 gw sshd\[1174\]: Failed password for root from 104.149.165.66 port 35166 ssh2 Mar 1 00:27:52 gw sshd\[1176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Mar 1 00:27:54 gw sshd\[1176\]: Failed password for root from 104.149.165.66 port 47486 ssh2 ... show less	Brute-Force SSH
🇩🇪 LarsLehmann	2022-02-28 15:33:40 (4 years ago)	Feb 28 21:33:38 mon01vp sshd[14806]: Failed password for root from 104.149.165.66 port 58082 ssh2	Brute-Force SSH
🇩🇪 www.blocklist.de	2022-02-28 15:21:53 (4 years ago)	Lines containing failures of 104.149.165.66 (max 1000) Feb 28 19:38:41 nextcloud sshd[1473972]: pam_ ... show more Lines containing failures of 104.149.165.66 (max 1000) Feb 28 19:38:41 nextcloud sshd[1473972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:43 nextcloud sshd[1473972]: Failed password for r.r from 104.149.165.66 port 39772 ssh2 Feb 28 19:38:44 nextcloud sshd[1473972]: Connection closed by authenticating user r.r 104.149.165.66 port 39772 [preauth] Feb 28 19:38:45 nextcloud sshd[1473976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:47 nextcloud sshd[1473976]: Failed password for r.r from 104.149.165.66 port 46036 ssh2 Feb 28 19:38:49 nextcloud sshd[1473976]: Connection closed by authenticating user r.r 104.149.165.66 port 46036 [preauth] Feb 28 19:38:50 nextcloud sshd[1473995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:52 nextcl........ ------------------------------ show less	FTP Brute-Force Hacking
🇺🇸 Arnold Wright	2022-02-28 15:17:06 (4 years ago)	Feb 28 13:17:02 phoenix sshd[290929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Feb 28 13:17:02 phoenix sshd[290929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=root Feb 28 13:17:04 phoenix sshd[290929]: Failed password for root from 104.149.165.66 port 55442 ssh2 ... show less	SSH
🇩🇪 www.blocklist.de	2022-02-28 14:41:34 (4 years ago)	Lines containing failures of 104.149.165.66 (max 1000) Feb 28 19:38:41 nextcloud sshd[1473972]: pam_ ... show more Lines containing failures of 104.149.165.66 (max 1000) Feb 28 19:38:41 nextcloud sshd[1473972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:43 nextcloud sshd[1473972]: Failed password for r.r from 104.149.165.66 port 39772 ssh2 Feb 28 19:38:44 nextcloud sshd[1473972]: Connection closed by authenticating user r.r 104.149.165.66 port 39772 [preauth] Feb 28 19:38:45 nextcloud sshd[1473976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:47 nextcloud sshd[1473976]: Failed password for r.r from 104.149.165.66 port 46036 ssh2 Feb 28 19:38:49 nextcloud sshd[1473976]: Connection closed by authenticating user r.r 104.149.165.66 port 46036 [preauth] Feb 28 19:38:50 nextcloud sshd[1473995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.165.66 user=r.r Feb 28 19:38:52 nextcl........ ------------------------------ show less	FTP Brute-Force Hacking

Showing 1 to 15 of 309 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.214

🇺🇸 162.216.150.118

🇮🇳 125.22.69.193

🇰🇷 118.36.222.243

🇧🇪 34.62.16.191

🇧🇪 34.14.1.166

🇺🇸 13.221.242.173

🇮🇷 2.188.206.146

🇮🇩 216.244.94.253

🇺🇸 216.180.246.240

🇧🇷 216.98.214.235

🇺🇸 199.165.159.60

🇬🇧 195.140.214.22

🇦🇷 190.105.188.41

🇵🇰 175.107.233.141

🇺🇸 174.76.8.147

🇧🇷 167.250.162.172

🇺🇸 167.99.98.129

🇧🇩 103.158.3.26

🇳🇱 77.91.71.92