JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.64.15.220

104.64.15.220 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 100%: ?

100%

ISP	Akamai Technologies, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	akamai.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.64.15.220

Whois 104.64.15.220

IP Abuse Reports for 104.64.15.220:

This IP address has been reported a total of 85 times from 74 distinct sources. 104.64.15.220 was first reported on July 9th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-10 22:45:00 (5 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇦 hpg	2026-07-10 15:19:18 (13 hours ago)	158 invalid SSH login attempts from 104.64.15.220 in the last 14.6 hours	Brute-Force SSH
🇰🇷 GoForceX	2026-07-10 13:31:32 (14 hours ago)	2026-07-10T13:20:54.870796+00:00 instance-20241105-1148 sshd[749616]: Invalid user node from 104.64. ... show more 2026-07-10T13:20:54.870796+00:00 instance-20241105-1148 sshd[749616]: Invalid user node from 104.64.15.220 port 60784 2026-07-10T13:23:04.659394+00:00 instance-20241105-1148 sshd[749622]: Invalid user builder from 104.64.15.220 port 60908 2026-07-10T13:27:14.476870+00:00 instance-20241105-1148 sshd[749640]: Invalid user postgres from 104.64.15.220 port 38612 2026-07-10T13:29:23.443423+00:00 instance-20241105-1148 sshd[749648]: Invalid user lab from 104.64.15.220 port 39274 2026-07-10T13:31:31.642948+00:00 instance-20241105-1148 sshd[749661]: Invalid user sftpuser from 104.64.15.220 port 59610 ... show less	Brute-Force SSH
Anonymous	2026-07-10 12:17:55 (16 hours ago)	2026-07-10T14:17:47.986695+02:00 104.64.15.220:37980 http-in http-in/<NOSRV> 3/-1/-1/-1/3 410 961 - ... show more 2026-07-10T14:17:47.986695+02:00 104.64.15.220:37980 http-in http-in/<NOSRV> 3/-1/-1/-1/3 410 961 - - PR-- 3/2/0/0/0 0/0 {myip:80} "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" WAF_ACTION:deny WAF_ID(s):920350,930100,930110,932230,932250,932260,949110 2026-07-10T14:17:48.563937+02:00 104.64.15.220:37984 http-in http-in/<NOSRV> 2/-1/-1/-1/2 410 961 - - PR-- 3/2/0/0/0 0/0 {myip:80} "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" WAF_ACTION:deny WAF_ID(s):920350,932230,932250,932260,949110 2026-07-10T14:17:49.130455+02:00 104.64.15.220:37998 http-in http-in/<NOSRV> 4/-1/-1/-1/4 410 961 - - PR-- 3/2/0/0/0 0/0 {myip:80} "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" WAF_ACTION:deny WAF_ID(s):920350,920250,933100,933120,933140,933150,933160,942151,949110 2026-07-10T14:17:49.697002+02:00 104.64.15.220 ... show less	Web App Attack
🇮🇩 PENJAGA.AUM	2026-07-10 11:20:12 (17 hours ago)	104.64.15.220 - Attack: ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt	Web App Attack SQL Injection Spoofing
🇩🇪 phil2k	2026-07-10 10:50:57 (17 hours ago)	fail2ban:firewall:2026-07-10T12:50:55.154310+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-07-10T12:50:55.154310+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=104.64.15.220 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=51984 PROTO=TCP SPT=52382 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-10T12:50:55.154344+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=104.64.15.220 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=51984 PROTO=TCP SPT=52382 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇫🇷 LRob	2026-07-10 10:34:33 (17 hours ago)	CrowdSec: crowdsecurity/http-cve-2021-41773 \| req: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more CrowdSec: crowdsecurity/http-cve-2021-41773 \| req: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] \| UA: ["-"] show less	Web App Attack
🇨🇦 hpg	2026-07-10 10:23:38 (17 hours ago)	116 invalid SSH login attempts from 104.64.15.220 in the last 9.7 hours	Brute-Force SSH
Anonymous	2026-07-10 10:04:30 (18 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events=1; Hosts=_; Paths=/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh; Country=ID; ASN=63949 Akamai Connected Cloud show less	Hacking Web App Attack
🇫🇷 paradoxnetworks	2026-07-10 09:27:30 (18 hours ago)	2026-07-10T09:20:51.942558+00:00 edge-thn-par02.int.pdx.net.uk sshd[3748742]: Invalid user test from ... show more 2026-07-10T09:20:51.942558+00:00 edge-thn-par02.int.pdx.net.uk sshd[3748742]: Invalid user test from 104.64.15.220 port 55494 2026-07-10T09:23:02.636786+00:00 edge-thn-par02.int.pdx.net.uk sshd[3748910]: Invalid user user from 104.64.15.220 port 38028 2026-07-10T09:27:29.776970+00:00 edge-thn-par02.int.pdx.net.uk sshd[3749201]: Invalid user admin from 104.64.15.220 port 51860 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-07-10 09:04:38 (19 hours ago)	2026-07-10 09:04:38 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇧🇷 W8C Dev	2026-07-10 09:02:27 (19 hours ago)	Jul 10 06:02:26 vmori-manager-1 sshd[31555]: Connection closed by authenticating user admin 104.64.1 ... show more Jul 10 06:02:26 vmori-manager-1 sshd[31555]: Connection closed by authenticating user admin 104.64.15.220 port 34080 [preauth] ... show less	Brute-Force SSH
🇩🇪 patrisei	2026-07-10 08:48:54 (19 hours ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-cve-2021-4177 ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-cve-2021-41773 show less	Port Scan Web App Attack
🇫🇷 kleine babykatze	2026-07-10 08:38:13 (19 hours ago)	2026-07-10T10:35:52.982989+02:00 vmd177327 sshd[1135693]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-10T10:35:52.982989+02:00 vmd177327 sshd[1135693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.64.15.220 2026-07-10T10:35:55.066111+02:00 vmd177327 sshd[1135693]: Failed password for invalid user admin from 104.64.15.220 port 51116 ssh2 2026-07-10T10:38:11.584229+02:00 vmd177327 sshd[1136558]: Invalid user orangepi from 104.64.15.220 port 37306 ... show less	Brute-Force SSH FTP Brute-Force
Anonymous	2026-07-10 08:17:38 (20 hours ago)	Http Port:443 (http_status:400) - Agent:libredtail-http	Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 209.42.21.161

🇩🇪 185.242.3.195

🇺🇦 176.124.133.80

🇩🇪 147.90.209.15

🇺🇸 65.49.1.111

🇮🇪 54.217.9.25

🇨🇳 14.20.73.26

🇧🇷 2804:37f0:fc68:e300:815:867f:646:8231

🇧🇷 201.74.240.82

🇭🇰 199.45.155.72

🇳🇱 195.178.110.137

🇺🇸 192.169.226.90

🇧🇷 191.122.152.161

🇲🇽 189.156.212.174

🇬🇧 185.247.137.103

🇳🇱 185.93.89.167

🇳🇱 176.65.148.25

🇺🇸 172.191.94.172

🇺🇸 172.190.51.254

🇺🇸 165.154.172.97