JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.13.192

172.104.13.192 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 29%: ?

29%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.13.192

Whois 172.104.13.192

IP Abuse Reports for 172.104.13.192:

This IP address has been reported a total of 53 times from 27 distinct sources. 172.104.13.192 was first reported on February 15th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-04-17 12:10:14 (1 month ago)	[12:10] Port scanning. Port(s) scanned: TCP/143	Port Scan
🇺🇸 drewf.ink	2026-04-12 16:10:06 (1 month ago)	[16:10] Port scanning. Port(s) scanned: TCP/143	Port Scan
🇸🇬 drewf.ink	2026-04-11 04:07:09 (1 month ago)	[04:07] Port scanning. Port(s) scanned: TCP/8443	Port Scan
🇨🇳 ThreatBook.io	2026-04-10 22:54:29 (1 month ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/172.104.13.192	SSH
🇦🇹 urnilxfgbez	2026-04-10 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇪 RoboSOC	2026-04-10 14:24:01 (1 month ago)	Port 22 Scan, PTR: None	Port Scan
🇩🇪 ghostwarriors	2026-04-10 13:50:04 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 sh97	2026-04-10 13:29:33 (1 month ago)	US03-CB-SPK: SSH Brute Force from 172.104.13.192 at 2026-04-10 18:59:33 IST	Brute-Force SSH
🇫🇷 kayzo	2026-04-10 13:29:32 (1 month ago)	2026-04-10T14:29:25.810502+01:00 DEDICATED-SH01 sshd-session[2437799]: Invalid user fastuser from 17 ... show more 2026-04-10T14:29:25.810502+01:00 DEDICATED-SH01 sshd-session[2437799]: Invalid user fastuser from 172.104.13.192 port 35018 2026-04-10T14:29:25.910344+01:00 DEDICATED-SH01 sshd-session[2437799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.13.192 2026-04-10T14:29:28.801585+01:00 DEDICATED-SH01 sshd-session[2437799]: Failed password for invalid user fastuser from 172.104.13.192 port 35018 ssh2 2026-04-10T14:29:31.548516+01:00 DEDICATED-SH01 sshd-session[2437837]: Invalid user system from 172.104.13.192 port 35042 ... show less	Brute-Force SSH
🇦🇺 GE	2026-04-10 13:29:28 (1 month ago)	2026-04-11T00:29:24.921538+11:00 www.geddy.au sshd-session[1514702]: Invalid user fastuser from 172. ... show more 2026-04-11T00:29:24.921538+11:00 www.geddy.au sshd-session[1514702]: Invalid user fastuser from 172.104.13.192 port 39252 2026-04-11T00:29:25.224358+11:00 www.geddy.au sshd-session[1514702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.13.192 2026-04-11T00:29:27.669677+11:00 www.geddy.au sshd-session[1514702]: Failed password for invalid user fastuser from 172.104.13.192 port 39252 ssh2 ... show less	SSH
🇧🇾 lns.bz	2026-04-10 13:29:26 (1 month ago)	SSH bruteforce [BY]	SSH
🇩🇪 NetWatch	2026-04-10 13:29:25 (1 month ago)	The IP 172.104.13.192 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
Anonymous	2026-04-10 13:22:12 (1 month ago)	Apr 10 15:22:04 valerii sshd[3899475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Apr 10 15:22:04 valerii sshd[3899475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172-104-13-192.ip.linodeusercontent.com Apr 10 15:22:07 valerii sshd[3899475]: Failed password for [redacted] from 172.104.13.192 port 56290 ssh2 Apr 10 15:22:10 valerii sshd[3899481]: Invalid user [redacted] from 172.104.13.192 Apr 10 15:22:10 valerii sshd[3899481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172-104-13-192.ip.linodeusercontent.com Apr 10 15:22:12 valerii sshd[3899481]: Failed password for [redacted] from 172.104.13.192 port 56298 ssh2 ... show less	Brute-Force SSH
🇵🇱 sefinek.net	2026-04-10 12:23:00 (1 month ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: ubuntu:ubuntu123456, user:123456, ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: ubuntu:ubuntu123456, user:123456, gns3:gns3, a:a, admin2:admin2, terraria:123456, root:Aa123123, dmdba:dmdba, test:test, milad:milad, init:init, root:qwertyuiop, root:Passw0rd, root:Aa123456., root:root@1234, opc:opc, deploy:password, mc:mc, node:123456, test:test!@, xcy:123456, hamed:hamed, nexus:nexus, root:A123456a, test:1234qwer, root:Aa123456, deploy:123456, operator:operator, oscar:oscar, developer:123, deploy:admin, root:linux, test1:test123, root:1qaz2wsx, root:1029384756, root:12345678, steam:123, user1:1qaz@WSX, server:server, root:1qaz@WSX3edc, root:QWEqwe123, tester:tester, deploy:123 • Number of login attempts: 43 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force SSH
Anonymous	2026-04-10 12:21:57 (1 month ago)	Apr 10 14:21:47 valerii sshd[3896572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Apr 10 14:21:47 valerii sshd[3896572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172-104-13-192.ip.linodeusercontent.com Apr 10 14:21:49 valerii sshd[3896572]: Failed password for [redacted] from 172.104.13.192 port 39900 ssh2 Apr 10 14:21:53 valerii sshd[3896578]: Invalid user [redacted] from 172.104.13.192 Apr 10 14:21:53 valerii sshd[3896578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172-104-13-192.ip.linodeusercontent.com Apr 10 14:21:55 valerii sshd[3896578]: Failed password for [redacted] from 172.104.13.192 port 38652 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.70.226

🇮🇳 182.95.186.66

🇯🇵 172.104.100.117

🇲🇽 148.216.255.251

🇺🇸 138.197.64.69

🇺🇸 104.248.119.2

🇺🇸 100.29.192.37

🇧🇷 89.116.115.61

🇺🇸 66.132.172.37

🇺🇸 64.227.17.76

🇰🇷 211.105.129.57

🇩🇪 193.58.121.21

🇫🇮 193.35.17.17

🇮🇳 139.59.78.146

🇺🇸 135.119.239.52

🇮🇳 122.252.246.48

🇨🇳 114.223.76.35

🇷🇺 95.47.246.223

🇲🇩 91.208.197.227

🇱🇺 83.142.209.244