104.128.161.31

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
15 reports
12 reporters · latest 2 days ago
ISP
EPB Fiber Optics
Usage Type
Fixed Line ISP
ASN
AS26827
Domain Name
epbinternet.com
Country
🇺🇸 United States of America
City
Chattanooga, Tennessee
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2 🇳🇱 Netherlands 2
Most common categories Brute-Force 5 DDoS Attack 4 Email Spam 3 Hacking 3 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 IPCollective Intelligence
Mobile Proxy - IPCollective Intelligence
Open Proxy
🇩🇪 LRob
DDoS Attack Bad Web Bot
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-on-non-chromium)
DDoS Attack
🇳🇱 hmdkmrn
Unauthorized auth attempt on mail server using stolen credentials
Email Spam Hacking
🇸🇬 mypatricks
Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇸🇬 mypatricks
Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous
WEB attack
Brute-Force
Anonymous
Distributed web scraper targeting /store/filtered/ on shop.grizzlyliquor.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 hablaxdev
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 1 unsolicited message (spam/phishing (fake document notifications)). Observed 2026-10-25T14:32:18-04:00 to 2026-10-25T14:32:18-04:00.
Email Spam Hacking Brute-Force
🇺🇸 hablaxdev
Unauthorized SMTP AUTH on our mail server using stolen mailbox credentials (1 mailbox); relayed 1 unsolicited message (spam/phishing (fake document notifications)). Observed 2026-10-25T14:32:18-04:00 to 2026-10-25T14:32:18-04:00.
Email Spam Hacking Brute-Force
🇩🇪 LRob
Shop search flood (L7 DDoS) | path: /7-velo-electrique-ville | query: order=product.price.asc&q=Marque-Bergamont-Haibike/Taille-XXL | src_port: 30475
DDoS Attack Web App Attack
🇮🇩 xveil
2026-04-14T00:51:27.153995 mail-honeypot postfix/submission/smtpd[14057]: warning: unknown[104.128.161.31]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
🇮🇹 VHosting
Detected attack and reported by a human
Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous
botnet
DDoS Attack
🇩🇪 SMARTNET
Aisuru(Mirai variant) DDoS
DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 217.104.119.42
🇳🇱 195.178.110.227
🇮🇹 185.197.8.145
🇺🇸 172.234.222.168
🇺🇸 162.216.149.99
🇳🇱 138.226.239.234
🇷🇺 91.185.47.28
🇺🇦 46.149.179.108
🇺🇸 162.216.150.110
🇺🇸 146.190.72.144
🇮🇳 122.183.40.68
🇩🇪 89.244.90.249
🇺🇸 74.125.224.74
🇧🇪 34.22.146.232
🇰🇷 221.158.100.113
🇬🇧 193.163.125.235
🇦🇺 162.158.168.172
🇬🇧 148.252.147.46
🇬🇧 147.12.224.49
🇨🇳 144.79.70.100
feedback