AbuseIPDB » 104.131.110.106

104.131.110.106 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 69%: ?

69%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	Clifton, New Jersey

Report 104.131.110.106

Whois 104.131.110.106

IP Abuse Reports for 104.131.110.106:

This IP address has been reported a total of 32 times from 27 distinct sources. 104.131.110.106 was first reported on November 10th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Gem	2024-11-15 23:07:10 (3 weeks ago)	Unauthorized web scan.	Web App Attack
LTM	2024-11-14 07:20:01 (3 weeks ago)	IP/Port Scan	Port Scan Brute-Force
gu-alvareza	2024-11-14 07:05:24 (3 weeks ago)	SystemBC.Botnet	DDoS Attack Hacking
sweplox.se	2024-11-13 21:43:46 (3 weeks ago)	104.131.110.106 - - [12/Nov/2024:15:56:47 +0000] "GET /upl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"<b ... show more104.131.110.106 - - [12/Nov/2024:15:56:47 +0000] "GET /upl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.131.110.106 - - [12/Nov/2024:15:56:48 +0000] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.110.106 - - [12/Nov/2024:15:56:48 +0000] "GET /systembc/password.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.110.106 - - [12/Nov/2024:15:56:48 +0000] "GET /password.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.110.106 - - [13/Nov/2024:21:43:43 +0000] "GET /upl.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.131.110.106 - - [13/Nov/2024:21:43:45 +0000] "GET /1.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari ... show less	Bad Web Bot SSH
raspi4	2024-11-13 17:48:39 (3 weeks ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
Christophe	2024-11-13 10:22:19 (3 weeks ago)	[Wed Nov 13 11:22:18.114222 2024] [php:error] [pid 52990:tid 52990] [client 104.131.110.106:57770] s ... show more[Wed Nov 13 11:22:18.114222 2024] [php:error] [pid 52990:tid 52990] [client 104.131.110.106:57770] script '/var/www/html/upl.php' not found or unable to stat [Wed Nov 13 11:22:18.913680 2024] [php:error] [pid 52985:tid 52985] [client 104.131.110.106:57808] script '/var/www/html/1.php' not found or unable to stat [Wed Nov 13 11:22:19.317885 2024] [php:error] [pid 50013:tid 50013] [client 104.131.110.106:57834] script '/var/www/html/password.php' not found or unable to stat ... show less	Hacking Web App Attack
Anonymous	2024-11-13 08:00:37 (3 weeks ago)	attack="SystemBC.Botnet"	Hacking Web App Attack
gu-alvareza	2024-11-13 07:05:22 (3 weeks ago)	SystemBC.Botnet	DDoS Attack Hacking
service Informatique	2024-11-13 04:00:37 (3 weeks ago)	GET /t4	Web App Attack
rtbh.com.tr	2024-11-12 20:53:21 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
pigro	2024-11-12 20:03:26 (3 weeks ago)	104.131.110.106 - - [12/Nov/2024:21:03:25 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x05\x18\x89 ... show more104.131.110.106 - - [12/Nov/2024:21:03:25 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x05\x18\x89;xM\xE6G\x08\xE8\xE8_J\x95\xCDj" 400 157 "-" "-" 104.131.110.106 - - [12/Nov/2024:21:03:25 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x10\xE74K-t\xCE\xEF\xFC\xF0fmL0u\xA1M\xCC6Z\xE9\x1F]\x96\xA5mQ\xFE\x96e\xD3\x97\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" ... show less	Web App Attack
BarredOwl	2024-11-12 14:15:00 (3 weeks ago)	104.131.110.106 - - [12/Nov/2024:03:15:37 -0500] "GET /password.php HTTP/1.1" 403	Web App Attack
WhiteFireOCN1	2024-11-12 13:03:40 (3 weeks ago)	9 unauthorized connection attempts to port 80 HTTP GET to / from 104[.]131[.]110[.]106:39564 - ... show more9 unauthorized connection attempts to port 80 HTTP GET to / from 104[.]131[.]110[.]106:39564 - 2024-11-12T12:59:43 HTTP GET to /form[.]html from 104[.]131[.]110[.]106:39578 - 2024-11-12T12:59:44 HTTP GET to /upl[.]php from 104[.]131[.]110[.]106:39590 - 2024-11-12T12:59:44 HTTP GET to /t4 from 104[.]131[.]110[.]106:39600 - 2024-11-12T12:59:45 HTTP GET to /geoip/ from 104[.]131[.]110[.]106:39610 - 2024-11-12T12:59:46 HTTP GET to /favicon[.]ico from 104[.]131[.]110[.]106:39626 - 2024-11-12T12:59:47 HTTP GET to /1[.]php from 104[.]131[.]110[.]106:39630 - 2024-11-12T12:59:47 HTTP GET to /systembc/password[.]php from 104[.]131[.]110[.]106:39632 - 2024-11-12T12:59:48 show less	Port Scan Hacking Web App Attack
Countryman	2024-11-12 09:35:00 (3 weeks ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
sefinek.net	2024-11-12 09:28:39 (3 weeks ago)	Blocked by UFW (TCP on port 80). Source port: 52497 TTL: 247 Packet length: 44<br ... show moreBlocked by UFW (TCP on port 80). Source port: 52497 TTL: 247 Packet length: 44 TOS: 0x00 This report (for 104.131.110.106) was generated by: https://github.com/sefinek24/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack