Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 104.199.50.78:
This IP address has been reported a total of
27
times from
24 distinct
sources.
104.199.50.78 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 5
reports;
United States of America
with 5
reports;
Germany
with 4
reports.
The most common categories in these recent reports were:
Port Scan
14
times;
Brute-Force
11
times;
Hacking
6
times;
Email Spam
5
times;
IoT Targeted
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Aug 30 02:38:22 <mail.info> [redacted] sm-mta[21620]: 67U6cMWv021620: rejecting commands from 78.50. ...
show moreAug 30 02:38:22 <mail.info> [redacted] sm-mta[21620]: 67U6cMWv021620: rejecting commands from 78.50.199.104.bc.googleusercontent.com [104.199.50.78] due to pre-greeting traffic after 0 seconds
Aug 30 02:38:24 <mail.info> [redacted] sm-mta[21626]: 67U6cO4l021626: rejecting commands from 78.50.199.104.bc.googleusercontent.com [104.199.50.78] due to pre-greeting traffic after 0 seconds
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/21 (ftp).
DDoS Attack
IoT Targeted
Brute-Force
Anonymous
2026-08-30T05:32:08.714020+00:00 jomu postfix/postscreen[936585]: PREGREET 18 after 0.01 from [104.1 ...
show more2026-08-30T05:32:08.714020+00:00 jomu postfix/postscreen[936585]: PREGREET 18 after 0.01 from [104.199.50.78]:16248: EHLO example.com\r\n
2026-08-30T05:32:08.842295+00:00 jomu postfix/postscreen[936585]: PREGREET 1023 after 0 from [104.199.50.78]:16250: \026\003\001\005\304\001\000\005\300\003\003\022\330\377\327\241\327\225\226\330\017\366\034\206C\26
2026-08-30T05:32:08.868035+00:00 jomu postfix/postscreen[936585]: PREGREET 59 after 0 from [104.199.50.78]:16256: ;\000\000\000\001\000\000\000\000\000\000\000\324\a\000\000\000\000\000\000admin.$cmd\000\000\000\00
...
show less
2026-08-30 07:13:54 wonderland sendmail[447111]: 67U5DsBV447111: rejecting commands from 78.50.199.1 ...
show more2026-08-30 07:13:54 wonderland sendmail[447111]: 67U5DsBV447111: rejecting commands from 78.50.199.104.bc.googleusercontent.com [104.199.50.78] due to pre-greeting traffic after 0 seconds
show less
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized ftpd/tcp traffic (dst port 21, src port 49360) against ...
show more🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized ftpd/tcp traffic (dst port 21, src port 49360) against a passive decoy service with no legitimate function, consistent with automated scanning.
show less
(eximsyntax) Exim syntax errors from 104.199.50.78 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 ...
show more(eximsyntax) Exim syntax errors from 104.199.50.78 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_EXIMSYNTAX; Logs: 2026-08-30 07:43:32 SMTP call from 78.50.199.104.bc.googleusercontent.com [104.199.50.78]:20296 dropped: too many syntax or protocol errors (last command was "?\f?", NULL)
show less
2026-08-30T06:06:47.542407+02:00 mx postfix/dnsblog[2467472]: addr 104.199.50.78 listed by domain ze ...
show more2026-08-30T06:06:47.542407+02:00 mx postfix/dnsblog[2467472]: addr 104.199.50.78 listed by domain zen.spamhaus.org as 127.0.0.3
2026-08-30T06:06:47.542458+02:00 mx postfix/dnsblog[2467472]: addr 104.199.50.78 listed by domain zen.spamhaus.org as 127.0.0.4
2026-08-30T06:06:47.587719+02:00 mx postfix/dnsblog[2467472]: addr 104.199.50.78 listed by domain zen.spamhaus.org as 127.0.0.4
...
show less
(ftpd) Failed FTP login from 104.199.50.78 (BE/Belgium/Brussels Capital/Brussels/78.50.199.104.bc.go ...
show more(ftpd) Failed FTP login from 104.199.50.78 (BE/Belgium/Brussels Capital/Brussels/78.50.199.104.bc.googleusercontent.com/[redacted])
show less
