This IP address has been reported a total of
61
times from
56 distinct
sources.
104.131.166.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-03T10:40:43.882206+08:00 vps-ebd448c1 sshd-session[2193353]: banner exchange: Connection fro ...
show more2026-09-03T10:40:43.882206+08:00 vps-ebd448c1 sshd-session[2193353]: banner exchange: Connection from 104.131.166.106 port 44776: invalid format
2026-09-03T10:40:44.321115+08:00 vps-ebd448c1 sshd-session[2193354]: Connection from 104.131.166.106 port 44780 on 51.79.161.204 port 22 rdomain ""
2026-09-03T10:40:44.321349+08:00 vps-ebd448c1 sshd-session[2193354]: banner exchange: Connection from 104.131.166.106 port 44780: invalid format
show less
LF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 104.131.166.106 (US/United States/-): 2 in the l ...
show moreLF_EXIMSYNTAX: (eximsyntax) Exim syntax errors from 104.131.166.106 (US/United States/-): 2 in the last 3600 secs
show less
Banned by Multi Agent · node …auqv · reason=SSH banner invalid / banner exchange invalid format · at ...
show moreBanned by Multi Agent · node …auqv · reason=SSH banner invalid / banner exchange invalid format · attempts=3 · SSH banner invalid / banner exchange invalid format
show less
Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ...
show morePort scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week.
show less
Blocked by os-abuseipdb; 480 hits, proto=tcp, ports=10000,110,143,2083,2087,21,22,3000,3306,443,445, ...
show moreBlocked by os-abuseipdb; 480 hits, proto=tcp, ports=10000,110,143,2083,2087,21,22,3000,3306,443,445,465,5000,543
show less
2026-09-02T10:37:51.640399+00:00 dockage sshd-session[2287138]: banner exchange: Connection from 104 ...
show more2026-09-02T10:37:51.640399+00:00 dockage sshd-session[2287138]: banner exchange: Connection from 104.131.166.106 port 39546: invalid format
2026-09-02T10:37:51.749202+00:00 dockage sshd-session[2287137]: error: kex_exchange_identification: read: Connection reset by peer
2026-09-02T10:37:51.749232+00:00 dockage sshd-session[2287137]: Connection reset by 104.131.166.106 port 39542
2026-09-02T10:37:57.388017+00:00 dockage sshd-session[2287801]: Connection closed by 104.131.166.106 port 49276 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-09-02T08:59:21.277927+00:00 Canada1 sshd-session[3590860]: Connection closed by 104.131.166.106 ...
show more2026-09-02T08:59:21.277927+00:00 Canada1 sshd-session[3590860]: Connection closed by 104.131.166.106 port 54994 [preauth]
2026-09-02T08:59:46.447597+00:00 Canada1 sshd-session[3593353]: banner exchange: Connection from 104.131.166.106 port 56044: invalid format [preauth]
...
show less
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
Showing 1 to
15
of 61 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩