JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.131.10.204

Activity Trending Down

Abuse confidence score ?

30% Elevated

345 reports

99 reporters · latest 1 week ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.131.10.204

Export CSV

This IP address has been reported a total of 345 times from 99 distinct sources. 104.131.10.204 was first reported on June 12th 2021, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Brazil with 1 report; Canada with 1 report; Germany with 1 report. The most common categories in these recent reports were: Web App Attack 2 times; Port Scan 1 time; Brute-Force 1 time; SSH 1 time; IoT Targeted 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-09-29 12:06:29 (1 week ago)	[probe-168-134] 2026-09-29 11:46:57, Client: 104.131.10.204, Protocol: 6, Unauthorized activity to H ... show more [probe-168-134] 2026-09-29 11:46:57, Client: 104.131.10.204, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇸🇪 KIDOS	2026-09-29 12:01:39 (1 week ago)	Apache monitor: ssrf_log_spoofing	Brute-Force SSH
🇨🇦 Anymous	2026-09-29 11:31:57 (1 week ago)	GET / HTTP/1.1 403 6137 "-" "Mozilla/5.0 zgrab/0.x"	Port Scan Web App Attack
🇩🇪 entspannt	2026-09-29 11:19:30 (1 week ago)	Detected empty referer, indicating web scraping / abusive scanning with UA: "Mozilla/5.0 zgrab/0.x" ... show more Detected empty referer, indicating web scraping / abusive scanning with UA: "Mozilla/5.0 zgrab/0.x" and uri: "/index.php" show less	IoT Targeted
🇺🇸 RH5	2026-09-29 11:13:09 (1 week ago)	User-agent blocked via advanced UA rule (zgrab) [bad-bot list]. UTC 2026-09-29 11:13	Bad Web Bot
🇺🇸 xmission.com	2026-01-11 06:56:00 (8 months ago)	Blocked by UFW (TCP on 5552) Source port: 61005 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5552) Source port: 61005 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 104.131.10.204) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 RoboSOC	2024-11-04 14:15:50 (1 year ago)	TCP SYN with data , PTR: PTR record not found	Hacking
Anonymous	2022-03-04 14:00:00 (4 years ago)	SSH-Attack	SSH
🇬🇧 moebius	2021-06-29 15:33:33 (5 years ago)	Invalid user vbox from 104.131.10.204 port 56418	Brute-Force SSH
🇿🇦 IrisFlower	2021-06-29 13:08:35 (5 years ago)	Unauthorized connection attempt detected from IP address 104.131.10.204 to port 2220 [J]	Port Scan Hacking
🇫🇷 sololinux.es	2021-06-29 11:44:32 (5 years ago)	Jun 29 17:44:31 host sshd[27197]: Invalid user vbox from 104.131.10.204 port 33284 ...	Brute-Force SSH
🇿🇦 IrisFlower	2021-06-29 10:44:59 (5 years ago)	Unauthorized connection attempt detected from IP address 104.131.10.204 to port 2220 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-06-29 09:42:33 (5 years ago)	Unauthorized connection attempt detected from IP address 104.131.10.204 to port 2220 [J]	Port Scan Hacking
🇨🇦 James Calum	2021-06-29 08:47:29 (5 years ago)	Jun 29 12:44:55 Sildom2 sshd[3696487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Jun 29 12:44:55 Sildom2 sshd[3696487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.10.204 Jun 29 12:44:55 Sildom2 sshd[3696487]: Invalid user web from 104.131.10.204 port 41892 Jun 29 12:44:56 Sildom2 sshd[3696487]: Failed password for invalid user web from 104.131.10.204 port 41892 ssh2 Jun 29 12:47:27 Sildom2 sshd[3697082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.10.204 user=root Jun 29 12:47:29 Sildom2 sshd[3697082]: Failed password for root from 104.131.10.204 port 53054 ssh2 ... show less	Brute-Force SSH
🇩🇪 42	2021-06-29 08:44:58 (5 years ago)	2021-06-29T14:42:37.094723cyberdyne sshd[1999646]: Failed password for root from 104.131.10.204 port ... show more 2021-06-29T14:42:37.094723cyberdyne sshd[1999646]: Failed password for root from 104.131.10.204 port 39430 ssh2 2021-06-29T14:44:56.027747cyberdyne sshd[1999794]: Invalid user web from 104.131.10.204 port 50564 2021-06-29T14:44:56.032298cyberdyne sshd[1999794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.10.204 2021-06-29T14:44:57.679982cyberdyne sshd[1999794]: Failed password for invalid user web from 104.131.10.204 port 50564 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 345 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 43.159.136.201

🇨🇳 223.247.218.112

🇬🇧 200.138.46.168

🇨🇦 198.44.157.162

🇳🇱 172.71.95.50

🇩🇪 167.94.146.61

🇳🇱 162.159.113.122

🇯🇵 152.32.203.18

🇸🇪 104.22.43.87

🇺🇸 96.78.175.36

🇳🇱 45.142.193.221

🇧🇪 34.38.238.214

🇮🇳 20.219.160.77

🇮🇷 5.160.143.165

🇨🇳 223.96.219.92

🇰🇷 211.193.249.210

🇧🇪 198.235.24.205

🇹🇳 196.203.231.220

🇺🇸 195.184.76.163

🇰🇷 175.115.29.122