JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.183.2

104.131.183.2 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.183.2

Whois 104.131.183.2

IP Abuse Reports for 104.131.183.2:

This IP address has been reported a total of 29 times from 28 distinct sources. 104.131.183.2 was first reported on October 13th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-10-16 00:07:19 (23 hours ago)	Too many Status 40X (21)	Brute-Force Web App Attack
🇳🇴 jad-abuse	2026-10-15 22:11:59 (1 day ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor( ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor(s); 28 hits. show less	Port Scan Bad Web Bot
Anonymous	2026-10-15 22:07:12 (1 day ago)	Bot / seems abusive / Apache connections: 40	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇬🇧 Yosi	2026-10-15 22:05:40 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 datajt	2026-10-15 22:01:50 (1 day ago)	Web vulnerability probing (CrowdSec scenario crowdsecurity/http-probing).	Web App Attack
🇩🇪 todix	2026-10-15 22:00:19 (1 day ago)	"HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, ... show more "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" show less	Web App Attack
🇫🇷 Baking333	2026-10-15 21:32:32 (1 day ago)	[redacted] 104.131.183.2 - - [15/Oct/2026:22:32:31 +0100] "HEAD /wordpress/ HTTP/1.1" 301 194 0/135 ... show more [redacted] 104.131.183.2 - - [15/Oct/2026:22:32:31 +0100] "HEAD /wordpress/ HTTP/1.1" 301 194 0/135 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" [redacted] 104.131.183.2 - - [15/Oct/2026:22:32:31 +0100] "HEAD /wordpress/ HTTP/1.1" 301 215 0/319 "http://[redacted]/wordpress/" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-10-15 21:18:00 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 81>=65, Abuse 92, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
🇳🇱 BlueWire Hosting	2026-10-15 21:13:23 (1 day ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 big-cloud.nl	2026-10-15 19:30:25 (1 day ago)	Try to access /backup/	Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-10-15 19:27:59 (1 day ago)	404 burst: 20 hits in 5 min, URI /store/, Ref http://hardcloud.cz/store/, UA Mozilla/5.0 (Linux; And ... show more 404 burst: 20 hits in 5 min, URI /store/, Ref http://hardcloud.cz/store/, UA Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36 show less	Brute-Force Web App Attack Bad Web Bot
🇩🇪 ghostwarriors	2026-10-15 19:20:12 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-15 19:02:12 (1 day ago)	104.131.183.2 - - [15/Oct/2026:21:02:08 +0200] "HEAD /site/ HTTP/1.1" 301 191 "-" "Mozilla/5.0 (Wind ... show more 104.131.183.2 - - [15/Oct/2026:21:02:08 +0200] "HEAD /site/ HTTP/1.1" 301 191 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 104.131.183.2 - - [15/Oct/2026:21:02:09 +0200] "HEAD /site/ HTTP/2.0" 404 69 "http://[site]./site/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 104.131.183.2 - - [15/Oct/2026:21:02:09 +0200] "HEAD /de/ HTTP/1.1" 301 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 104.131.183.2 - - [15/Oct/2026:21:02:09 +0200] "HEAD /de/ HTTP/2.0" 404 46 "http://[site]./de/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 104.131.183.2 - - [15/Oct/2026:21:02:09 +0200] "HEAD /shop/ HTTP/1.1" 301 191 "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungB show less	Bad Web Bot
🇫🇷 Kejult	2026-10-15 18:57:12 (1 day ago)	Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 29 request eve ... show more Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 29 request event(s), 29 distinct path(s), 1 request(s) to suspicious path(s). Examples: /wp/. show less	Hacking Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-10-15 18:57:02 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.101

🇨🇴 181.52.113.102

🇻🇪 200.8.235.243

🇨🇴 186.84.89.62

🇰🇷 115.160.76.23

🇬🇧 139.59.168.149

🇨🇳 120.237.113.139

🇳🇦 105.232.176.69

🇷🇺 87.251.81.76

🇺🇸 66.132.172.106

🇧🇷 205.210.31.146

🇧🇷 170.79.164.152

🇷🇴 92.118.39.49

🇺🇸 66.132.172.204

🇬🇧 216.226.76.10

🇹🇼 198.235.24.67

🇦🇷 190.105.160.5

🇷🇺 188.235.146.90

🇬🇧 161.35.40.182

🇺🇸 159.223.102.233