172.104.234.47

Classification: Malicious

172.104.234.47 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-22. Network: AS63949 Linode.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2021-11-20 00:45:35 2026-08-22 15:22:48 attacker malicious-activity
Malicious Host CIArmy 2021-11-20 00:45:34 2023-08-25 08:09:31 malicious-activity
SSH Attacker Blocklist.de 2022-08-14 02:08:15 2023-01-24 02:43:46 malicious-activity
Mail Spammer Blocklist.de 2022-08-24 01:59:47 2023-01-06 02:16:40 malicious-activity
IMAP Attacker Blocklist.de 2022-08-23 01:56:46 2023-01-06 02:09:05 malicious-activity
Malicious Host HoneyDB 2022-11-20 00:00:00 2022-11-22 00:00:00 malicious-activity
Bruteforce login attacker Blocklist.de 2021-12-11 01:57:19 2022-10-11 02:07:01 malicious-activity
HTTP Attacker Blocklist.de 2021-12-11 01:42:53 2022-10-11 01:56:00 malicious-activity

Tags

ssh bruteforce bot mail spam attacker imap pop3 sasl login joomla wordpress apache ddos rfi

Whois information

AS name
AS63949 Linode
AS registry
arin
AS date
2015-06-19 00:00:00
AS CIDR
172.104.224.0/19
CIDR
172.104.0.0/15
Registrant
Linode
Address
145 Broadway
City
Frankfurt am Main
State
MA
Postal code
60311
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2021-11-20 00:45:34
Last updated
2026-08-22 15:22:49

Malicious IPs in the same CIDR

172.104.240.74 172.104.247.248 172.104.237.140 172.104.243.155 172.104.236.166 172.104.234.47 172.104.235.161 172.104.239.9 172.104.244.71