JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.181.202.183

104.181.202.183 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 79%: ?

79%

ISP	AT&T Enterprises, LLC
Usage Type	Fixed Line ISP
ASN	AS7018
Hostname(s)	104-181-202-183.lightspeed.lnngmi.sbcglobal.net
Domain Name	att.com
Country	🇺🇸 United States of America
City	Lansing, Michigan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.181.202.183

Whois 104.181.202.183

IP Abuse Reports for 104.181.202.183:

This IP address has been reported a total of 18 times from 15 distinct sources. 104.181.202.183 was first reported on April 3rd 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-08-22 06:06:17 (2 hours ago)	SSH break in attempt ...	SSH
🇧🇷 noconex	2026-08-21 17:35:08 (15 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 104.181.20 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 104.181.202.183 show less	Port Scan Brute-Force SSH
🇳🇵 radheykrishna.com.np	2026-08-21 12:48:19 (20 hours ago)	Aug 21 18:33:19 kernel: [1032643.591805] [UFW BLOCK] IN=ens160 OUT= SRC=104.181.202.183 LEN=60 TOS=0 ... show more Aug 21 18:33:19 kernel: [1032643.591805] [UFW BLOCK] IN=ens160 OUT= SRC=104.181.202.183 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=41683 DF PROTO=TCP SPT=49923 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 RAP	2026-08-18 16:03:21 (3 days ago)	2026-08-18 16:03:21 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-08-18 13:40:59 (3 days ago)	Aug 18 09:34:13 localhost kernel: [115405216.770833] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 18 09:34:13 localhost kernel: [115405216.770833] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.181.202.183 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=50286 DF PROTO=TCP SPT=38576 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 18 09:34:13 localhost kernel: [115405216.770855] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.181.202.183 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=50286 DF PROTO=TCP SPT=38576 DPT=23 SEQ=3859468162 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A009C0BEC0000000001030306) Aug 18 09:40:58 localhost kernel: [115405622.585609] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.181.202.183 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=15483 DF PROTO=TCP SPT=60941 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 18 09:40:58 localhost kernel: [115405622.585627] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0 show less	Port Scan
🇧🇷 noconex	2026-08-18 10:31:02 (3 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 104.181.20 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 104.181.202.183 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-18 10:04:23 (3 days ago)	PORT & IP Scan.	Port Scan Brute-Force
🇹🇼 kk_it_man	2026-08-18 01:40:01 (4 days ago)	honey catch	Port Scan
🇨🇦 DRI	2026-08-17 23:12:28 (4 days ago)	Unsolicited TCP traffic on Honeypot, srcport=43596 dstport=23	Port Scan Hacking
🇧🇷 noconex	2026-08-17 08:00:21 (5 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 104.181.20 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 104.181.202.183 show less	Port Scan Brute-Force SSH
🇺🇸 xmission.com	2026-08-17 03:26:15 (5 days ago)	Blocked by UFW (TCP on 22) Source port: 39930 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 39930 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 104.181.202.183) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇸🇪 Tsumugi Kotobuki	2026-08-16 21:41:50 (5 days ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 47 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 47 \| Len: 60B \| Win: 65535(1) \| rDNS: 104-181-202-183.lightspeed.lnngmi.sbcglobal.net \| F2B/ufw-honeypot@2026-08-16T21:41:49Z show less	Port Scan Hacking
🇫🇷 sthoyer.de	2026-08-16 17:22:39 (5 days ago)	Aug 16 19:22:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 16 19:22:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=104.181.202.183 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=26769 DF PROTO=TCP SPT=36054 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 NetVexor	2026-08-16 12:24:54 (5 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-08-16 07:05:53 (6 days ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 45.91.22.80

🇰🇷 211.223.107.86

🇭🇰 194.187.178.47

🇫🇷 173.249.52.138

🇺🇸 165.154.36.215

🇺🇸 162.216.150.226

🇺🇸 162.216.149.225

🇫🇮 147.185.133.76

🇺🇸 96.78.175.36

🇺🇸 67.205.148.136

🇺🇸 64.62.156.142

🇺🇸 185.116.237.166

🇺🇸 162.216.150.229

🇺🇸 136.66.149.90

🇵🇰 117.134.199.3

🇨🇳 115.191.23.138

🇳🇱 45.148.10.151

🇬🇧 35.203.210.114

🇺🇸 2001:470:1:fb5::1fc

🇦🇺 203.194.5.183