JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.104.49.64

Neutral Activity

Abuse Confidence Score

0% Low Risk

15 reports

10 reporters · latest 1 year ago

ISP: Linode
Usage Type: Data Center/Web Hosting/Transit
ASN: AS63949
Hostname(s): 172-104-49-64.ip.linodeusercontent.com
Domain Name: linode.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.104.49.64 has been reported 15 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

15 from 10 distinct reporters

First reported

March 2nd 2024

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetWatch	2024-12-30 13:59:19 UTC · (1 year ago)	The IP 172.104.49.64 tried multiple SSH logins	Brute-Force SSH
🇯🇵 chirorist	2024-12-30 05:58:42 UTC · (1 year ago)	2024-12-30T14:58:30.641135 vps1.chirorist.org sshd[1060568]: Failed password for root from 172.104.49.64 port 53062 ssh2 2024-12-30T14:58:32.642530 vps1.chirorist.org sshd[1060570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more 2024-12-30T14:58:30.641135 vps1.chirorist.org sshd[1060568]: Failed password for root from 172.104.49.64 port 53062 ssh2 2024-12-30T14:58:32.642530 vps1.chirorist.org sshd[1060570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root 2024-12-30T14:58:34.914003 vps1.chirorist.org sshd[1060570]: Failed password for root from 172.104.49.64 port 47484 ssh2 2024-12-30T14:58:38.962157 vps1.chirorist.org sshd[1060577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root 2024-12-30T14:58:41.056160 vps1.chirorist.org sshd[1060577]: Failed password for root from 172.104.49.64 port 47488 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-12-29 20:29:47 UTC · (1 year ago)	sshd	Brute-Force SSH
🇭🇺 szasa	2024-12-28 23:43:24 UTC · (1 year ago)	Dec 29 00:43:17 webhosting01 sshd[3768329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root Dec 29 00:43:18 webhosting01 sshd[3768329]: Failed password for root from 172.104.49.64 port ... show more Dec 29 00:43:17 webhosting01 sshd[3768329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root Dec 29 00:43:18 webhosting01 sshd[3768329]: Failed password for root from 172.104.49.64 port 52550 ssh2 Dec 29 00:43:21 webhosting01 sshd[3768332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root Dec 29 00:43:23 webhosting01 sshd[3768332]: Failed password for root from 172.104.49.64 port 46248 ssh2 ... show less	Brute-Force SSH
🇩🇪 Fayello	2024-12-28 21:32:26 UTC · (1 year ago)	Dec 28 22:32:22 localhost sshd[3239517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root Dec 28 22:32:25 localhost sshd[3239517]: Failed password for root from 172.104.49.64 port 53206 ... show more Dec 28 22:32:22 localhost sshd[3239517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.49.64 user=root Dec 28 22:32:25 localhost sshd[3239517]: Failed password for root from 172.104.49.64 port 53206 ssh2 ... show less	Brute-Force SSH
🇨🇳 cybsecaoccol	2024-07-23 15:49:07 UTC · (2 years ago)	unauthorized connection or malicious port scan attempted on tcp port - njng	Port Scan Hacking
🇺🇸 MPL	2024-07-23 15:26:39 UTC · (2 years ago)	tcp/23 (2 or more attempts)	Port Scan
🇵🇹 rnl	2024-03-05 22:23:18 UTC · (2 years ago)	postfix	Email Spam Brute-Force
🇨🇿 Honzas	2024-03-05 04:49:33 UTC · (2 years ago)	Automatic report:05.03.2024 4:49:33. Port:25	Email Spam
🇵🇹 rnl	2024-03-04 22:18:23 UTC · (2 years ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇨🇿 Honzas	2024-03-04 05:17:16 UTC · (2 years ago)	Automatic report:04.03.2024 5:17:16. Port:25	Email Spam
🇩🇪 mapik	2024-03-03 11:09:01 UTC · (2 years ago)	2024-03-03T12:08:58.617123+01:00 multi.mapik.cz postfix/smtpd[2007039]: NOQUEUE: reject: RCPT from 172-104-49-64.ip.linodeusercontent.com[172.104.49.64]: 554 5.7.1 Service unavailable; Client host [172.104.49.64] blocked using zen.spamhaus.org; Liste ... show more 2024-03-03T12:08:58.617123+01:00 multi.mapik.cz postfix/smtpd[2007039]: NOQUEUE: reject: RCPT from 172-104-49-64.ip.linodeusercontent.com[172.104.49.64]: 554 5.7.1 Service unavailable; Client host [172.104.49.64] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/172.104.49.64; from=<> to=<[email protected]> proto=ESMTP helo=<o7.ptr916.manychat.com> ... show less	Brute-Force
🇩🇪 mapik	2024-03-03 09:16:40 UTC · (2 years ago)	2024-03-03T10:16:37.921036+01:00 multi.mapik.cz postfix/smtpd[2002972]: NOQUEUE: reject: RCPT from 172-104-49-64.ip.linodeusercontent.com[172.104.49.64]: 554 5.7.1 Service unavailable; Client host [172.104.49.64] blocked using zen.spamhaus.org; Liste ... show more 2024-03-03T10:16:37.921036+01:00 multi.mapik.cz postfix/smtpd[2002972]: NOQUEUE: reject: RCPT from 172-104-49-64.ip.linodeusercontent.com[172.104.49.64]: 554 5.7.1 Service unavailable; Client host [172.104.49.64] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/172.104.49.64; from=<> to=<[email protected]> proto=ESMTP helo=<o7.ptr916.manychat.com> ... show less	Brute-Force
🇨🇿 Honzas	2024-03-02 23:59:51 UTC · (2 years ago)	Automatic report:02.03.2024 23:59:51. Port:25	Email Spam
🇨🇿 Honzas	2024-03-02 16:02:51 UTC · (2 years ago)	Automatic report:02.03.2024 16:02:51. Port:25	Email Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.26

🇨🇳 101.96.195.17

🇷🇴 2.57.121.25

🇸🇬 201.79.124.69

🇺🇸 199.165.159.187

🇳🇱 195.178.110.232

🇳🇱 193.47.62.110

🇪🇬 156.207.148.125

🇨🇳 125.84.251.175

🇮🇳 103.248.120.6

🇺🇸 17.166.150.93

🇸🇬 212.73.148.6

🇳🇱 192.253.248.229

🇫🇷 185.101.21.214

🇫🇷 92.161.106.94

🇧🇬 78.128.112.74

🇩🇪 69.5.169.75

🇭🇰 46.247.61.192

🇴🇲 37.40.90.207

🇳🇱 213.209.159.228