JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.119.243

104.131.119.243 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 2%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.119.243

Whois 104.131.119.243

IP Abuse Reports for 104.131.119.243:

This IP address has been reported a total of 19 times from 12 distinct sources. 104.131.119.243 was first reported on December 6th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-29 06:52:29 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=3)	Hacking Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-03-10 11:25:25 (2 months ago)	Port Scan Attack proto:TCP src:61015 dst:3306	Port Scan
🇺🇸 RAP	2026-03-10 10:39:44 (2 months ago)	2026-03-10 10:39:44 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇳🇱 homeshowdomain.nl	2025-12-09 23:01:09 (5 months ago)	Auto-ban: 13 malicious requests on 2025-12-08 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 13 malicious requests on 2025-12-08 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇺🇸 Jason Howell	2025-12-08 22:17:44 (5 months ago)	104.131.119.243 - - [08/Dec/2025:15:11:43 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:15:11:43 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:15:28:15 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:15:44:48 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:16:01:23 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:16:17:43 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 Jason Howell	2025-12-08 20:05:28 (6 months ago)	104.131.119.243 - - [08/Dec/2025:13:00:24 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:13:00:24 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:13:16:00 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:13:32:31 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:13:48:54 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:14:05:27 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 Jason Howell	2025-12-08 17:54:42 (6 months ago)	104.131.119.243 - - [08/Dec/2025:10:48:52 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:10:48:52 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:11:05:08 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:11:21:40 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:11:38:14 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:11:54:41 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 Jason Howell	2025-12-08 15:42:44 (6 months ago)	104.131.119.243 - - [08/Dec/2025:08:36:16 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:08:36:16 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:08:52:43 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:09:09:13 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:09:25:56 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:09:42:43 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 Jason Howell	2025-12-08 13:30:26 (6 months ago)	104.131.119.243 - - [08/Dec/2025:06:25:06 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:06:25:06 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:06:41:26 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:06:57:41 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:07:13:58 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:07:30:25 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" ... show less	Web App Attack
🇺🇸 Jason Howell	2025-12-08 11:20:12 (6 months ago)	104.131.119.243 - - [08/Dec/2025:04:17:08 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:04:17:08 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:04:32:19 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:04:48:05 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:05:04:04 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:05:20:11 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" ... show less	Web App Attack
🇮🇹 VHosting	2025-12-08 10:50:02 (6 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇧🇪 cmbplf	2025-12-08 10:26:44 (6 months ago)	3.881 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇺🇸 Jason Howell	2025-12-08 09:03:01 (6 months ago)	104.131.119.243 - - [08/Dec/2025:02:07:46 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla ... show more 104.131.119.243 - - [08/Dec/2025:02:07:46 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:02:21:17 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:02:35:00 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:02:48:59 -0600] "POST /wp-login.php HTTP/1.1" 200 6697 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:03:02:59 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" ... show less	Web App Attack
🇫🇷 mrcrassi	2025-12-08 06:56:22 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Jason Howell	2025-12-08 06:56:10 (6 months ago)	104.131.119.243 - - [08/Dec/2025:00:15:44 -0600] "GET /wp-login.php HTTP/1.1" 301 601 "-" "Mozilla/5 ... show more 104.131.119.243 - - [08/Dec/2025:00:15:44 -0600] "GET /wp-login.php HTTP/1.1" 301 601 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:00:15:44 -0600] "GET /wp-login.php HTTP/1.1" 200 4035 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:00:41:59 -0600] "POST /wp-login.php HTTP/1.1" 200 6699 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:00:49:09 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" 104.131.119.243 - - [08/Dec/2025:00:56:08 -0600] "POST /wp-login.php HTTP/1.1" 200 6698 "-" "Mozilla/5.0" ... show less	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 101.47.27.73

🇳🇱 93.123.72.166

🇪🇬 41.42.252.218

🇧🇷 205.210.31.166

🇨🇳 183.134.43.14

🇧🇷 164.152.250.192

🇧🇷 152.32.200.243

🇵🇰 119.159.147.232

🇺🇸 66.132.224.15

🇧🇪 35.205.178.104

🇧🇪 34.22.118.173

🇮🇷 2.180.187.44

🇰🇷 211.240.117.40

🇨🇦 178.93.200.246

🇦🇷 170.83.125.181

🇻🇳 101.99.14.34

🇳🇱 89.21.67.188

🇨🇦 85.217.149.21

🇳🇱 45.148.10.147

🇺🇦 193.93.229.142