JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.131.106.9

Neutral Activity

Abuse Confidence Score

0% Low Risk

38 reports

35 reporters · latest 7 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.131.106.9 has been reported 38 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

38 from 35 distinct reporters

First reported

June 16th 2022

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 rafale2k	2026-04-03 09:48:35 UTC · (7 months ago)	SSH Brute Force	Brute-Force SSH
🇯🇵 rafale2k	2026-03-20 18:39:40 UTC · (7 months ago)	SSH Brute Force	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-06 20:11:55 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-05 18:26:56 UTC · (8 months ago)	SSH Brute Force Attack	Brute-Force SSH
🇦🇺 Ticketebo Pty. Ltd.	2026-03-05 18:22:55 UTC · (8 months ago)	Mar 6 05:15:07 mags sshd-session[1139862]: Invalid user postgres from 104.131.106.9 port 54242 Mar 6 05:16:19 mags sshd-session[1139907]: Invalid user oracle from 104.131.106.9 port 48534 Mar 6 05:17:36 mags sshd-session[1139928]: Invalid user use ... show more Mar 6 05:15:07 mags sshd-session[1139862]: Invalid user postgres from 104.131.106.9 port 54242 Mar 6 05:16:19 mags sshd-session[1139907]: Invalid user oracle from 104.131.106.9 port 48534 Mar 6 05:17:36 mags sshd-session[1139928]: Invalid user user from 104.131.106.9 port 33428 Mar 6 05:19:00 mags sshd-session[1139977]: Invalid user vps from 104.131.106.9 port 43294 Mar 6 05:20:16 mags sshd-session[1140159]: Invalid user testuser from 104.131.106.9 port 59464 Mar 6 05:21:32 mags sshd-session[1140175]: Invalid user server from 104.131.106.9 port 60406 Mar 6 05:22:53 mags sshd-session[1140195]: Invalid user hadoop from 104.131.106.9 port 42354 ... show less	Brute-Force
🇩🇪 fynndows.de	2026-03-05 18:22:24 UTC · (8 months ago)	2026-03-05T18:22:22.238920+00:00 fynn-epyc3 sshd-session[2637294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 2026-03-05T18:22:24.354650+00:00 fynn-epyc3 sshd-session[2637294]: Failed passwor ... show more 2026-03-05T18:22:22.238920+00:00 fynn-epyc3 sshd-session[2637294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 2026-03-05T18:22:24.354650+00:00 fynn-epyc3 sshd-session[2637294]: Failed password for invalid user server from 104.131.106.9 port 35794 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-05 18:21:02 UTC · (8 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 sebi	2026-03-05 18:21:01 UTC · (8 months ago)	2026-03-05T19:15:52.491171+01:00 Pi sshd[23824]: Invalid user postgres from 104.131.106.9 port 46344 2026-03-05T19:17:10.051867+01:00 Pi sshd[23867]: Invalid user oracle from 104.131.106.9 port 47082 2026-03-05T19:18:26.300764+01:00 Pi sshd[23895]: I ... show more 2026-03-05T19:15:52.491171+01:00 Pi sshd[23824]: Invalid user postgres from 104.131.106.9 port 46344 2026-03-05T19:17:10.051867+01:00 Pi sshd[23867]: Invalid user oracle from 104.131.106.9 port 47082 2026-03-05T19:18:26.300764+01:00 Pi sshd[23895]: Invalid user user from 104.131.106.9 port 59506 2026-03-05T19:19:47.523618+01:00 Pi sshd[23941]: Invalid user vps from 104.131.106.9 port 37122 2026-03-05T19:21:01.394170+01:00 Pi sshd[24033]: Invalid user testuser from 104.131.106.9 port 50106 show less	Brute-Force SSH
🇩🇪 pianoman911	2026-03-05 18:20:51 UTC · (8 months ago)	Mar 5 19:15:40 Debian-1010-buster-64-minimal sshd[1034671]: Invalid user postgres from 104.131.106.9 port 32812 Mar 5 19:16:56 Debian-1010-buster-64-minimal sshd[1063326]: Invalid user oracle from 104.131.106.9 port 46592 Mar 5 19:18:14 Debian-101 ... show more Mar 5 19:15:40 Debian-1010-buster-64-minimal sshd[1034671]: Invalid user postgres from 104.131.106.9 port 32812 Mar 5 19:16:56 Debian-1010-buster-64-minimal sshd[1063326]: Invalid user oracle from 104.131.106.9 port 46592 Mar 5 19:18:14 Debian-1010-buster-64-minimal sshd[1094112]: Invalid user user from 104.131.106.9 port 41088 Mar 5 19:19:34 Debian-1010-buster-64-minimal sshd[1123558]: Invalid user vps from 104.131.106.9 port 35814 Mar 5 19:20:50 Debian-1010-buster-64-minimal sshd[1151692]: Invalid user testuser from 104.131.106.9 port 58904 ... show less	Brute-Force SSH
🇧🇷 Joao Antonio	2026-03-05 18:20:24 UTC · (8 months ago)	2026-03-05T18:15:13.445149+00:00 hikari-starfire sshd[2551483]: Invalid user postgres from 104.131.106.9 port 52362 2026-03-05T18:16:27.644497+00:00 hikari-starfire sshd[2551543]: Invalid user oracle from 104.131.106.9 port 44880 2026-03-05T18:17:43. ... show more 2026-03-05T18:15:13.445149+00:00 hikari-starfire sshd[2551483]: Invalid user postgres from 104.131.106.9 port 52362 2026-03-05T18:16:27.644497+00:00 hikari-starfire sshd[2551543]: Invalid user oracle from 104.131.106.9 port 44880 2026-03-05T18:17:43.938214+00:00 hikari-starfire sshd[2551583]: Invalid user user from 104.131.106.9 port 49734 2026-03-05T18:19:07.600929+00:00 hikari-starfire sshd[2551635]: Invalid user vps from 104.131.106.9 port 35160 2026-03-05T18:20:23.240311+00:00 hikari-starfire sshd[2551692]: Invalid user testuser from 104.131.106.9 port 51276 ... show less	Brute-Force SSH
🇨🇳 Indexyz	2026-03-05 18:20:12 UTC · (8 months ago)	2026-03-06T02:17:30.053440+08:00 hostname sshd-session[2207481]: Invalid user user from 104.131.106.9 port 60842 2026-03-06T02:18:48.571703+08:00 hostname sshd-session[2207487]: Connection from 104.131.106.9 port 44294 on 10.66.0.230 port 22 rdom ... show more 2026-03-06T02:17:30.053440+08:00 hostname sshd-session[2207481]: Invalid user user from 104.131.106.9 port 60842 2026-03-06T02:18:48.571703+08:00 hostname sshd-session[2207487]: Connection from 104.131.106.9 port 44294 on 10.66.0.230 port 22 rdomain "" 2026-03-06T02:18:51.107710+08:00 hostname sshd-session[2207487]: Invalid user vps from 104.131.106.9 port 44294 2026-03-06T02:20:09.416495+08:00 hostname sshd-session[2207496]: Connection from 104.131.106.9 port 48020 on 10.66.0.230 port 22 rdomain "" 2026-03-06T02:20:11.424042+08:00 hostname sshd-session[2207496]: Invalid user testuser from 104.131.106.9 port 48020 show less	Brute-Force SSH
Anonymous	2026-03-05 18:20:08 UTC · (8 months ago)	Mar 6 07:15:04 felt sshd[4136493]: Invalid user postgres from 104.131.106.9 port 51054 Mar 6 07:16:13 felt sshd[4136929]: Invalid user oracle from 104.131.106.9 port 49332 Mar 6 07:17:30 felt sshd[4136962]: Invalid user user from 104.131.106.9 por ... show more Mar 6 07:15:04 felt sshd[4136493]: Invalid user postgres from 104.131.106.9 port 51054 Mar 6 07:16:13 felt sshd[4136929]: Invalid user oracle from 104.131.106.9 port 49332 Mar 6 07:17:30 felt sshd[4136962]: Invalid user user from 104.131.106.9 port 44920 Mar 6 07:18:51 felt sshd[4136992]: Invalid user vps from 104.131.106.9 port 38038 Mar 6 07:20:08 felt sshd[4137429]: Invalid user testuser from 104.131.106.9 port 48696 ... show less	Brute-Force SSH
🇫🇷 phoenix1jl96	2026-03-05 18:11:59 UTC · (8 months ago)	Mar 5 19:08:01 box sshd[2359862]: Failed password for root from 104.131.106.9 port 36176 ssh2 Mar 5 19:09:21 box sshd[2360600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 user=root Mar 5 ... show more Mar 5 19:08:01 box sshd[2359862]: Failed password for root from 104.131.106.9 port 36176 ssh2 Mar 5 19:09:21 box sshd[2360600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 user=root Mar 5 19:09:23 box sshd[2360600]: Failed password for root from 104.131.106.9 port 44502 ssh2 Mar 5 19:10:36 box sshd[2361804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 user=root Mar 5 19:10:38 box sshd[2361804]: Failed password for root from 104.131.106.9 port 43844 ssh2 Mar 5 19:11:56 box sshd[2362499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 user=root Mar 5 19:11:57 box sshd[2362499]: Failed password for root from 104.131.106.9 port 50704 ssh2 ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇺🇦 gbzret4d	2026-03-05 18:10:29 UTC · (8 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇫🇷 rj.	2026-03-05 18:09:30 UTC · (8 months ago)	2026-03-05T18:06:44.935444+00:00 mist sshd-session[408079]: Failed password for root from 104.131.106.9 port 54020 ssh2 2026-03-05T18:08:05.525025+00:00 mist sshd-session[408110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty ... show more 2026-03-05T18:06:44.935444+00:00 mist sshd-session[408079]: Failed password for root from 104.131.106.9 port 54020 ssh2 2026-03-05T18:08:05.525025+00:00 mist sshd-session[408110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 user=root 2026-03-05T18:08:07.446516+00:00 mist sshd-session[408110]: Failed password for root from 104.131.106.9 port 58964 ssh2 2026-03-05T18:09:27.711955+00:00 mist sshd-session[408167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.106.9 user=root 2026-03-05T18:09:29.995887+00:00 mist sshd-session[408167]: Failed password for root from 104.131.106.9 port 42026 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.234.218.245

🇭🇰 119.28.41.245

🇩🇪 2a02:560:5a5c:2c00:34e9:363d:75de:8e04

🇺🇸 2604:a880:400:d1:0:5:5f76:2001

🇵🇱 172.64.200.81

🇧🇬 78.128.113.74

🇮🇩 43.173.14.232

🇧🇪 34.38.19.77

🇬🇧 2a01:4020:1:1:103::ed

🇺🇸 2604:a880:400:d1:0:5:5f75:c001

🇰🇷 211.58.176.42

🇫🇷 169.58.121.238

🇮🇷 151.232.83.161

🇺🇸 136.85.178.219

🇺🇸 64.225.123.22

🇺🇸 54.81.200.59

🇳🇱 45.148.10.152

🇺🇸 43.172.114.89

🇺🇸 40.76.224.207

🇫🇷 37.66.160.179