This IP address has been reported a total of
17
times from
15 distinct
sources.
104.131.110.96 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing
show less
Web scanning / probing for vulnerable paths | URL: /shop/ | Evidence: altovolta.es 104.131.110.96 - ...
show moreWeb scanning / probing for vulnerable paths | URL: /shop/ | Evidence: altovolta.es 104.131.110.96 - - [21/Oct/2026:20:06:05 +0200] \"HEAD /shop/ HTTP/1.1\" 404 - \"http://rhin.es/shop/\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: DIGITALOCEAN-ASN | Country: US
show less
Port Scan
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 90%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 90%, Country: US, Attack patterns: WordPress scanning, Backup file probing
show less
http-probing - IP: 104.131.110.96 - time="2026-10-21T19:05:45+02:00" level=info msg="(555f66b4f6a74 ...
show morehttp-probing - IP: 104.131.110.96 - time="2026-10-21T19:05:45+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.131.110.96 (US/14061) : 4h ban on Ip 104.131.110.96" module=db
show less
Web App Attack
Anonymous
IP matched detection query 20 more in short time bad rqs.