104.244.79.40
Classification: Malicious
104.244.79.40 is a malicious IP address in Muri, CH. 805 sightings from 14 threat sources (HTTP Attacker, Bruteforce), last seen 2026-10-12.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | Blocklist.net.ua | 2026-01-22 14:29:05 | 2026-10-12 16:50:19 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-04 16:45:07 | 2026-09-11 16:44:26 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-01-15 13:10:04 | 2026-09-08 10:11:00 | anonymization vpn | |
| Mail Spammer | Barracuda | 2026-07-16 13:45:17 | 2026-09-08 10:11:00 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-01-08 23:55:44 | 2026-06-07 20:29:37 | compromised malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-01-24 07:33:27 | 2026-06-02 04:00:07 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-01-25 02:04:59 | 2026-06-02 02:00:07 | malicious-activity | |
| Mail Spammer | Blocklist.de | 2026-04-23 08:00:23 | 2026-04-24 08:00:28 | malicious-activity | |
| IMAP Attacker | Blocklist.de | 2026-04-23 07:00:36 | 2026-04-24 07:00:21 | malicious-activity | |
| Hacking | AbuseIPDB | 2026-01-10 16:48:13 | 2026-04-09 15:37:43 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-01-09 21:41:59 | 2026-04-09 15:37:43 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-01-09 22:15:46 | 2026-04-08 22:00:15 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-01-10 17:44:32 | 2026-04-08 02:47:22 | anomalous-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-01-10 18:27:59 | 2026-04-08 00:42:38 | anomalous-activity | |
| SSH Attacker | AbuseIPDB | 2026-01-11 00:33:44 | 2026-03-28 23:47:58 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-01-06 21:38:25 | 2026-03-26 00:07:54 | anomalous-activity | |
| Proxy | IPWhois.io | 2025-02-14 11:34:09 | 2025-02-14 11:34:09 | anonymization | |
| HTTP Spammer | StopForumSpam.com | 2021-02-04 19:29:52 | 2024-01-02 05:25:54 | malicious-activity | |
| HTTP Spammer | Sblam | 2022-11-13 03:08:22 | 2023-12-05 01:41:12 | malicious-activity | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2022-11-15 02:49:00 | 2023-11-14 13:18:16 | anonymization | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2022-11-15 02:47:14 | 2023-11-14 13:14:21 | anonymization | |
| TOR Exit Node | TorProject.org | 2023-07-28 04:34:31 | 2023-11-14 08:39:05 | anonymization | |
| HTTP Spammer | Botscout | 2022-12-28 18:15:58 | 2023-11-12 07:41:13 | malicious-activity | |
| SSH Attacker | Blocklist.net.ua | 2022-12-28 04:01:50 | 2023-08-21 05:38:19 | malicious-activity | |
| Malicious Host | HoneyDB | 2022-11-21 00:00:00 | 2023-07-27 00:00:00 | malicious-activity | |
| DDoS attack on site litsey-prosvita.lviv.ua | Blocklist.net.ua | 2023-01-25 04:21:45 | 2023-07-25 06:11:29 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2022-11-19 02:06:58 | 2023-06-24 04:27:25 | malicious-activity | |
| Anonymizer | FireHol | 2022-12-30 00:26:28 | 2022-12-30 00:26:28 | anonymization | |
| Mail Spammer | Abuseat.org | 2022-12-28 02:28:37 | 2022-12-28 14:51:32 | ||
| SSH Attacker | Maltiverse | 2022-11-14 19:50:47 | 2022-12-27 21:22:35 | malicious-activity | |
| Bruteforce | Maltiverse | 2022-11-11 23:02:58 | 2022-12-27 19:28:13 | malicious-activity | |
| FTP Attacker | Maltiverse | 2022-11-15 17:40:24 | 2022-12-27 15:10:14 | malicious-activity | |
| HTTP Attacker | Maltiverse | 2022-11-10 05:26:37 | 2022-12-27 08:56:51 | malicious-activity | |
| Port Scanner | Maltiverse | 2022-11-15 01:19:00 | 2022-12-27 04:45:19 | anomalous-activity | |
| Malicious Host | Maltiverse | 2022-11-16 06:01:19 | 2022-12-27 03:44:02 | compromised malicious-activity | |
| Hacking | Maltiverse | 2022-11-15 01:19:00 | 2022-12-27 00:03:27 | malicious-activity | |
| DDoS attack | Maltiverse | 2022-11-16 01:40:19 | 2022-12-23 12:10:28 | malicious-activity | |
| Proxy | Maltiverse | 2022-11-19 00:56:05 | 2022-12-20 04:58:45 | anonymization | |
| SQL Injection | Maltiverse | 2022-11-16 01:40:19 | 2022-12-19 02:59:23 | malicious-activity | |
| IMAP Attacker | Maltiverse | 2022-11-16 01:40:19 | 2022-12-19 02:59:23 | malicious-activity | |
| HTTP Scrapper | Maltiverse | 2022-11-16 01:40:19 | 2022-12-19 02:59:23 | anomalous-activity | |
| IoT Attacker | Maltiverse | 2022-11-16 01:40:19 | 2022-12-19 02:59:23 | malicious-activity | |
| Phishing | Maltiverse | 2022-11-23 02:32:59 | 2022-11-23 02:32:59 | malicious-activity |
Tags
tor anonymization bot abuse ssh bruteforce attacker login joomla wordpress apache ddos rfi imap pop3 sasl mail spamWhois information
- AS name
- AS53667 BuyVM
- AS registry
- arin
- AS date
- 2014-11-10 00:00:00
- AS CIDR
- 104.244.79.0/24
- CIDR
- 104.244.72.0/21
- Registrant
- BuyVM
- Address
- 1621 Central Ave
- City
- Muri
- State
- WY
- Postal code
- 5630
- Country
- CH — Switzerland 🇨🇭
- Contact email
- [email protected]
- First indexed
- 2021-02-04 19:29:52
- Last updated
- 2026-10-12 16:50:19
Malicious IPs in the same CIDR
104.244.79.44 104.244.79.50 104.244.79.61 104.244.79.75 104.244.79.40 104.244.79.25