JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.28.164.104

149.28.164.104 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	mail.myhealthgroup.com.au
Domain Name	vultr.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.28.164.104

Whois 149.28.164.104

IP Abuse Reports for 149.28.164.104:

This IP address has been reported a total of 83 times from 54 distinct sources. 149.28.164.104 was first reported on September 16th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Godert Jan van Manen	2026-09-17 11:41:41 (7 hours ago)	Sep 17 13:37:48 odin sshd[11496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 17 13:37:48 odin sshd[11496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 Sep 17 13:37:50 odin sshd[11496]: Failed password for invalid user user from 149.28.164.104 port 44042 ssh2 Sep 17 13:41:40 odin sshd[13326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 show less	Brute-Force SSH
🇳🇱 CaduVet	2026-09-17 11:12:23 (7 hours ago)	2026-09-16 11:40:09,663 fail2ban.actions [939]: NOTICE [sshd] Ban 149.28.164.104 2026-09-16 ... show more 2026-09-16 11:40:09,663 fail2ban.actions [939]: NOTICE [sshd] Ban 149.28.164.104 2026-09-16 18:23:22,508 fail2ban.actions [939]: NOTICE [sshd] Ban 149.28.164.104 2026-09-17 13:12:19,058 fail2ban.actions [939]: NOTICE [sshd] Ban 149.28.164.104 ... show less	Brute-Force
🇨🇦 zXero	2026-09-17 10:34:32 (8 hours ago)	Fail2Ban automatic report - jail: geoip-ssh	Brute-Force SSH DDoS Attack
Anonymous	2026-09-17 10:33:51 (8 hours ago)	2026-09-17T03:24:32.319180-07:00 hessvillage.com sshd[198094]: Invalid user user from 149.28.164.104 ... show more 2026-09-17T03:24:32.319180-07:00 hessvillage.com sshd[198094]: Invalid user user from 149.28.164.104 port 54176 2026-09-17T03:25:30.266120-07:00 hessvillage.com sshd[198155]: Invalid user user from 149.28.164.104 port 49086 2026-09-17T03:28:35.401027-07:00 hessvillage.com sshd[198379]: Invalid user user from 149.28.164.104 port 40268 2026-09-17T03:29:20.241759-07:00 hessvillage.com sshd[198422]: Invalid user user from 149.28.164.104 port 35484 2026-09-17T03:33:49.950743-07:00 hessvillage.com sshd[198747]: Invalid user user from 149.28.164.104 port 37242 ... show less	Brute-Force
🇳🇱 Godert Jan van Manen	2026-09-17 10:15:15 (8 hours ago)	Sep 17 12:09:55 odin sshd[13396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 17 12:09:55 odin sshd[13396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 Sep 17 12:09:56 odin sshd[13396]: Failed password for invalid user user from 149.28.164.104 port 36414 ssh2 Sep 17 12:15:15 odin sshd[15891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 show less	Brute-Force SSH
🇳🇱 Godert Jan van Manen	2026-09-17 09:49:54 (9 hours ago)	Sep 17 11:41:15 odin sshd[3551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 17 11:41:15 odin sshd[3551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 Sep 17 11:41:17 odin sshd[3551]: Failed password for invalid user user from 149.28.164.104 port 59938 ssh2 Sep 17 11:49:53 odin sshd[6013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 show less	Brute-Force SSH
🇧🇾 lns.bz	2026-09-17 09:23:12 (9 hours ago)	SSH bruteforce [BY]	SSH
🇳🇱 Godert Jan van Manen	2026-09-17 09:14:52 (9 hours ago)	Sep 17 11:07:52 odin sshd[22990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 17 11:07:52 odin sshd[22990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 Sep 17 11:07:55 odin sshd[22990]: Failed password for invalid user user from 149.28.164.104 port 43136 ssh2 Sep 17 11:14:51 odin sshd[25689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 show less	Brute-Force SSH
🇳🇱 Godert Jan van Manen	2026-09-17 08:09:48 (11 hours ago)	Sep 17 10:08:36 odin sshd[477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Sep 17 10:08:36 odin sshd[477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 Sep 17 10:08:38 odin sshd[477]: Failed password for invalid user user from 149.28.164.104 port 53560 ssh2 Sep 17 10:09:47 odin sshd[780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 show less	Brute-Force SSH
🇮🇳 evicky2002	2026-09-17 06:00:05 (13 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇲🇽 octageeks.com	2026-09-17 04:10:36 (15 hours ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇺🇸 mc4bbs	2026-09-17 01:56:55 (17 hours ago)	Sep 16 21:56:52 ChazTelPlex sshd[39403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 16 21:56:52 ChazTelPlex sshd[39403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 user=root Sep 16 21:56:54 ChazTelPlex sshd[39403]: Failed password for root from 149.28.164.104 port 35082 ssh2 ... show less	Brute-Force SSH
🇬🇧 Mendip_Defender	2026-09-17 01:49:47 (17 hours ago)	Sep 17 02:24:42 jackstringer sshd[3506976]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Sep 17 02:24:42 jackstringer sshd[3506976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 user=root Sep 17 02:24:45 jackstringer sshd[3506976]: Failed password for root from 149.28.164.104 port 54628 ssh2 Sep 17 02:50:01 jackstringer sshd[3509152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.164.104 user=root Sep 17 02:50:03 jackstringer sshd[3509152]: Failed password for root from 149.28.164.104 port 33424 ssh2 ... show less	Brute-Force SSH
🇺🇸 blackburied	2026-09-16 23:55:01 (19 hours ago)	SSH brute force on kuhioshores	Brute-Force SSH
🇺🇸 thardie	2026-09-16 17:17:51 (1 day ago)	2026-09-16T10:09:37.090697-07:00 orcas sshd[40489]: Invalid user deploy from 149.28.164.104 2026-09- ... show more 2026-09-16T10:09:37.090697-07:00 orcas sshd[40489]: Invalid user deploy from 149.28.164.104 2026-09-16T10:09:39.502253-07:00 orcas sshd[40646]: Invalid user deploy from 149.28.164.104 2026-09-16T10:10:13.651970-07:00 orcas sshd[42661]: Invalid user deploy from 149.28.164.104 2026-09-16T10:14:55.831595-07:00 orcas sshd[6926]: Invalid user deploy from 149.28.164.104 2026-09-16T10:17:51.243446-07:00 orcas sshd[15658]: Invalid user deploy from 149.28.164.104 ... show less	Brute-Force SSH

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.182.50.52

🇧🇩 202.40.190.150

🇬🇧 35.203.211.110

🇰🇷 210.182.73.137

🇭🇰 203.83.11.146

🇭🇰 202.155.236.242

🇸🇬 185.200.116.46

🇳🇱 159.223.8.65

🇳🇱 91.92.40.36

🇭🇰 43.129.193.109

🇺🇸 192.178.11.97

🇧🇷 179.48.18.42

🇸🇪 171.25.158.57

🇨🇳 106.55.254.60

🇨🇳 106.52.146.234

🇨🇳 14.17.85.226

🇰🇷 220.116.252.176

🇲🇦 160.179.43.203

🇲🇦 160.178.6.192

🇺🇸 137.184.226.250