JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.117.57

104.131.117.57 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.117.57

Whois 104.131.117.57

IP Abuse Reports for 104.131.117.57:

This IP address has been reported a total of 69 times from 60 distinct sources. 104.131.117.57 was first reported on June 27th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-03 22:25:31 (13 hours ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-29 22:26:13 (4 days ago)		Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-29 03:09:59 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-28 21:07:01 (5 days ago)	Automated web scanner. Requested suspicious paths: //blog/wp-includes/wlwmanifest.xml \| //xmlrpc.php ... show more Automated web scanner. Requested suspicious paths: //blog/wp-includes/wlwmanifest.xml \| //xmlrpc.php \| //2019/wp-includes/wlwmanifest.xml \| //wp/wp-includes/wlwmanifest.xml \| //wp-includes/wlwmanifest.xml \| //web/wp-includes/wlwmanifest.xml \| //2018/wp-includes/wlwmanifest.xml \| //news/wp-includes/wlwmanifest.xml \| //media/wp-includes/wlwmanifest.xml \| //wp1/wp-includes/wlwmanifest.xml \| //shop/wp-includes/wlwmanifest.xml \| //wp2/wp-includes/wlwmanifest.xml \| //sito/wp-includes/wlwmanifest.xml \| //site/wp-includes/wlwmanifest.xml \| //website/wp-, //wordpress/wp-includes/wlwmanifest.xml \| //xmlrpc.php \| //2019/wp-includes/wlwmanifest.xml \| //wp.... UTC: 2026-06-28 20:32:07. show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-28 20:49:04 (5 days ago)	104.131.117.57 - - [28/Jun/2026:23:49:03 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/ ... show more 104.131.117.57 - - [28/Jun/2026:23:49:03 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Web App Attack
🇷🇴 SpamStopper	2026-06-28 20:03:31 (5 days ago)	Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-28 17:00:10 (5 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇷🇴 ICT	2026-06-28 16:31:03 (5 days ago)	Jun 28 19:31:01 wordpress wordpress(acad-icht.tm.edu.ro)[18282]: XML-RPC authentication attempt for ... show more Jun 28 19:31:01 wordpress wordpress(acad-icht.tm.edu.ro)[18282]: XML-RPC authentication attempt for unknown user admin from 104.131.117.57 Jun 28 19:31:02 wordpress wordpress(acad-icht.tm.edu.ro)[18281]: XML-RPC authentication attempt for unknown user admin from 104.131.117.57 Jun 28 19:31:02 wordpress wordpress(acad-icht.tm.edu.ro)[17795]: XML-RPC authentication attempt for unknown user admin from 104.131.117.57 ... show less	Brute-Force Web App Attack
🇮🇩 Burayot	2026-06-28 16:12:10 (5 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.131.117.57 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.131.117.57 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇧🇪 Saec	2026-06-28 16:00:06 (5 days ago)	Jarvis auto-ban: CF honeypot path /xmlrpc.php (1× on saec.me)	Port Scan Web App Attack
🇺🇦 URAN Publishing Service	2026-06-28 14:26:27 (5 days ago)	104.131.117.57 - - [28/Jun/2026:17:20:54 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/ ... show more 104.131.117.57 - - [28/Jun/2026:17:20:54 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.131.117.57 - - [28/Jun/2026:17:26:27 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Web App Attack
🇬🇧 ISPLtd	2026-06-28 14:22:40 (5 days ago)	104.131.117.57 [28/Jun/2026:11:22:40 -0300] target.domain:80 URL:/wp-includes/wlwmanifest.xml "GET / ... show more 104.131.117.57 [28/Jun/2026:11:22:40 -0300] target.domain:80 URL:/wp-includes/wlwmanifest.xml "GET //wp-includes/wlwmanifest.xml 104.131.117.57 [28/Jun/2026:11:22:40 -0300] target.domain:80 URL:/xmlrpc.php "GET //xmlrpc.php?rsd ... show less	Hacking Web App Attack
🇩🇪 hbrks	2026-06-28 14:14:48 (5 days ago)	21 attack(s) detected, such as these: {"event":"web_block","ip":"104.131.117.57","host":"hub.marche- ... show more 21 attack(s) detected, such as these: {"event":"web_block","ip":"104.131.117.57","host":"hub.marche-be.com","request":"","user_agent":"","reason":"Status-0","timestamp":"2026-06-28T14:14:48 00:00","logentry":"hub.marche-be.com 104.131.117.57 - - [28/Jun/2026:14:14:48 0000] \"\" 400 0 \"-\" \"-\" \"-\""} * Report Details : https://p4u.xyz/IF9UNTJA7BU/1 IP Details *: https://p4u.xyz/IF9UNTJA7BU/2 show less	Web Spam Hacking Bad Web Bot
🇮🇹 mgarofano80	2026-06-28 14:03:13 (5 days ago)		Brute-Force Web App Attack
🇮🇹 VHosting	2026-06-28 13:20:07 (5 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 80.94.92.234

🇬🇧 195.96.139.169

🇺🇸 185.194.148.208

🇷🇺 151.0.33.131

🇺🇸 129.121.102.3

🇺🇸 104.236.53.110

🇮🇩 43.129.33.244

🇬🇧 35.203.210.4

🇷🇴 2.57.121.25

🇨🇿 2001:67c:1220:808:30d2:a580:67ec:b049

🇹🇳 197.5.145.114

🇲🇽 187.249.112.170

🇧🇷 186.238.242.194

🇱🇧 185.97.95.153

🇮🇳 103.107.60.45

🇱🇹 62.60.130.219

🇺🇸 50.6.228.32

🇮🇳 49.36.181.251

🇺🇸 45.79.153.51

🇬🇧 35.203.211.82