172.104.241.108

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
70% Elevated
17 reports
14 reporters · latest 1 day ago
ISP
Linode
Usage Type
Data Center/Web Hosting/Transit
ASN
AS63949
Hostname(s)
172-104-241-108.ip.linodeusercontent.com
Domain Name
linode.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 5 🇨🇦 Canada 1
Most common categories Port Scan 12 Brute-Force 2 Hacking 2 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/6379 (Redis); 10 application-level events across 2 source port(s). Sensor(s): Redishoneypot.
Port Scan
🇫🇷 noi
honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h
Port Scan
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 172-104-241-108.ip.linodeusercontent.com.
Port Scan
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Excessive port scans. -8ff06ede-
Port Scan
🇫🇷 Petre 21_ip
Port Scan
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 56 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 6379/Redis | Proto: TCP(1) | Flags: all SYN | TTL: 55 | Len: 60B | Win: 64240(1) | rDNS: 172-104-241-108.ip.linodeusercontent.com | F2B/ufw-honeypot@2026-11-06T15:28:26Z
Port Scan Hacking
🇫🇷 wiredalter
Blocked by fail2ban on o2VPS [6379/tcp] Source Port: 55110 TTL: 46 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Brute-Force SSH
🇩🇪 Coinetic AI Security
Connection to a trap port: 1 attempts on port 6379, 2026-11-06 07:24 - 07:24 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
Port Scan Hacking
🇫🇷 noi
honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h
Port Scan
🇫🇮 iamxorum
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.180.246.31
🇳🇱 195.206.234.19
🇺🇸 192.101.65.225
🇺🇸 172.110.223.86
🇺🇸 50.6.22.250
🇧🇪 35.210.114.224
🇬🇧 35.203.210.213
🇺🇸 212.119.40.115
🇳🇱 193.47.62.69
🇺🇸 159.89.95.127
🇳🇱 77.67.26.40
🇳🇱 64.205.72.205
🇺🇸 63.246.149.196
🇧🇪 35.210.54.245
🇬🇧 31.14.254.103
🇬🇧 31.14.254.18
🇸🇬 14.102.84.166
🇺🇸 208.83.20.20
🇳🇱 193.47.62.110
🇺🇸 172.206.242.255
feedback