JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.173.56

104.131.173.56 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 17%: ?

17%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.173.56

Whois 104.131.173.56

IP Abuse Reports for 104.131.173.56:

This IP address has been reported a total of 111 times from 65 distinct sources. 104.131.173.56 was first reported on April 23rd 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-05-17 21:48:03 (3 weeks ago)	Blocked by UFW (TCP on 8888) Source port: 61013 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8888) Source port: 61013 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 104.131.173.56) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 essinghigh	2026-05-17 21:17:33 (3 weeks ago)	IPS Detection: 104.131.173.56 -> DPT: 2000	Port Scan
🇯🇵 mkaraki	2026-05-17 20:36:01 (3 weeks ago)	1779050160 # Service_probe # SIGNATURE_SEND # source_ip:104.131.173.56 # dst_port:443 ...	Port Scan
🇫🇷 SpaceHost-Server	2026-04-06 22:25:44 (2 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-04 22:26:54 (2 months ago)		Brute-Force Web App Attack
Anonymous	2026-04-03 19:44:43 (2 months ago)	Port Scanner	Port Scan
🇺🇸 LSPCCU	2026-04-03 16:55:23 (2 months ago)	TSEC Honeypot Network report. Threat score: 90/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 90/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: ssh-telnet, cowrie. Context: 104. show less	Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
🇺🇸 bigscoots.com	2026-04-03 16:23:14 (2 months ago)	104.131.173.56 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ... show more 104.131.173.56 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 3 11:18:52 14529 sshd[25211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.153.139.68 user=root Apr 3 11:18:54 14529 sshd[25211]: Failed password for root from 78.153.139.68 port 59644 ssh2 Apr 3 11:23:03 14529 sshd[25578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.173.56 user=root Apr 3 11:21:45 14529 sshd[25448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.40.162 user=root Apr 3 11:21:47 14529 sshd[25448]: Failed password for root from 49.207.40.162 port 55499 ssh2 IP Addresses Blocked: 78.153.139.68 (FI/Finland/184782.ip-ptr.tech) show less	Brute-Force SSH
Anonymous	2026-04-03 16:17:42 (2 months ago)	unsolicited connect TCP dport 2375 (sport 48474)	Hacking
🇹🇷 Threat.live	2026-04-03 16:10:05 (2 months ago)	Suspicious activity, tcp/2222	Port Scan
🇺🇸 MPL	2026-04-03 16:02:29 (2 months ago)	tcp/2375 (6 or more attempts)	Port Scan
🇩🇪 mxpgmbh	2026-04-03 15:36:55 (2 months ago)	2026-04-03T16:36:21.139400+01:00 ** sshd-session[57639]: pam_unix(sshd:auth): authentication failu ... show more 2026-04-03T16:36:21.139400+01:00 sshd-session[57639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.173.56 user=root 2026-04-03T16:36:22.275982+01:00 sshd-session[57639]: Failed password for root from 104.131.173.56 port 43098 ssh2 2026-04-03T16:36:53.163141+01:00 sshd-session[58138]: Invalid user from 104.131.173.56 port 43784 2026-04-03T16:36:53.164674+01:00 sshd-session[58138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.173.56 2026-04-03T16:36:54.656239+01:00 sshd-session[58138]: Failed password for invalid user ** from 104.131.173.56 port 43784 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-03 15:28:48 (2 months ago)	(sshd) Failed SSH login from 104.131.173.56 (US/United States/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 104.131.173.56 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 3 10:27:25 17443 sshd[13117]: Invalid user admin from 104.131.173.56 port 42054 Apr 3 10:27:27 17443 sshd[13117]: Failed password for invalid user admin from 104.131.173.56 port 42054 ssh2 Apr 3 10:27:57 17443 sshd[13122]: Invalid user orangepi from 104.131.173.56 port 49058 Apr 3 10:27:59 17443 sshd[13122]: Failed password for invalid user orangepi from 104.131.173.56 port 49058 ssh2 Apr 3 10:28:30 17443 sshd[13193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.173.56 user=root show less	Brute-Force SSH
🇵🇱 alianet	2026-04-03 15:06:56 (2 months ago)	Apr 3 15:06:24 vps-eb8e942e sshd-session[1255023]: Connection closed by invalid user admin 104.131. ... show more Apr 3 15:06:24 vps-eb8e942e sshd-session[1255023]: Connection closed by invalid user admin 104.131.173.56 port 38398 [preauth] Apr 3 15:06:54 vps-eb8e942e sshd-session[1255039]: Connection from 104.131.173.56 port 34200 on 57.128.195.69 port 2222 rdomain "" Apr 3 15:06:55 vps-eb8e942e sshd-session[1255039]: Invalid user orangepi from 104.131.173.56 port 34200 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-04-03 14:32:09 (2 months ago)	2026-04-03 14:32:09 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.54

🇷🇼 197.243.14.52

🇯🇵 195.40.122.148

🇺🇸 156.146.54.85

🇭🇰 101.36.106.78

🇫🇷 92.137.138.130

🇺🇦 91.234.137.40

🇳🇱 46.151.178.13

🇸🇪 45.84.107.47

🇺🇸 43.173.75.221

🇬🇧 37.10.113.221

🇩🇪 34.159.163.56

🇨🇴 181.234.50.133

🇩🇪 139.19.117.197

🇨🇳 122.227.109.194

🇨🇳 120.236.49.131

🇷🇴 80.94.92.171

🇺🇸 66.132.224.16

🇺🇸 20.38.5.218

🇺🇸 18.190.15.50