149.104.71.155

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
54% Elevated
16 reports
13 reporters · latest 1 week ago
ISP
LIGHT NODE LIMITED
Usage Type
Data Center/Web Hosting/Transit
ASN
AS154177
Domain Name
lightnode.com
Country
🇸🇦 Saudi Arabia
City
Riyadh, Riyadh Region
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 2 🇧🇷 Brazil 1
Most common categories Port Scan 13 Hacking 3 Brute-Force 2 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
Port Scan
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇹🇷 pashait
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Oracle DB (8 events in 10min) at 2026-10-31 02:40
Hacking
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (561 distinct dst hosts)
Port Scan
Anonymous
Unauthorized connection to SMB port 445
Port Scan
Anonymous
Unauthorized connection to SMB port 445
Port Scan
Anonymous
Unauthorized connection to SMB port 445
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
Anonymous
Unauthorized connection to SMB port 445
Port Scan
Anonymous
denied SMB access attempt. destination port 445.
Port Scan Hacking
Anonymous
ET SCAN Suspicious inbound to MSSQL port 1433
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇫🇷 wiredalter
Blocked by fail2ban on o2VPS [1433/tcp] Source Port: 58575 TTL: 111 Packet Length: 52 TOS: 0x02 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 210.206.95.162
🇩🇪 185.220.101.27
🇦🇹 185.164.5.134
🇫🇮 170.168.97.126
🇸🇬 94.231.206.10
🇳🇱 77.239.124.146
🇺🇸 74.50.98.193
🇨🇳 60.16.220.23
🇺🇸 54.84.161.62
🇳🇱 45.148.10.152
🇳🇱 45.144.212.200
🇦🇺 34.87.202.246
🇰🇷 203.142.160.143
🇮🇳 103.120.250.116
🇸🇬 43.106.109.149
🇸🇪 31.208.55.106
feedback