JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.131.195.248

Neutral Activity

Abuse Confidence Score

0% Low Risk

30 reports

23 reporters · latest 1 year ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Secaucus, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.131.195.248 has been reported 30 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

30 from 23 distinct reporters

First reported

December 7th 2024

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 rshict	2024-12-11 17:58:06 UTC · (1 year ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇺🇸 gu-alvareza	2024-12-11 07:07:03 UTC · (1 year ago)	SystemBC.Botnet	DDoS Attack Hacking
🇬🇧 no1knows.com	2024-12-10 19:34:26 UTC · (1 year ago)	2024/12/10 19:34:22 [error] 834944#834944: 100018 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.131.195.248, server: _, request: "GET /upl.php HTTP/1.1", upstream: "fastcgi://unix:/run/php- ... show more 2024/12/10 19:34:22 [error] 834944#834944: 100018 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.131.195.248, server: _, request: "GET /upl.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" 2024/12/10 19:34:23 [error] 834944#834944: 100023 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.131.195.248, server: _, request: "GET /1.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" 2024/12/10 19:34:23 [error] 834944#834944: 100025 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 104.131.195.248, server: _, request: "GET /systembc/password.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" ... show less	Brute-Force Bad Web Bot
🇮🇪 Jim Keir	2024-12-10 19:25:55 UTC · (1 year ago)	2024-12-10 19:25:54 104.131.195.248 File scanning, blocking 104.131.195.248 for 5 minutes	Web App Attack
🇺🇸 JCB	2024-12-10 15:46:00 UTC · (1 year ago)	104.131.195.248 - - [09/Dec/2024:17:50:09 +0200] "\x16\x03\x01" 400 226 "-" "-" 104.131.195.248 - - [09/Dec/2024:17:50:09 +0200] "\x16\x03\x01" 400 226 "-" "-" 104.131.195.248 - - [09/Dec/2024:17:50:09 +0200] "GET /form.html HTTP/1.1" 404 196 "-" " ... show more 104.131.195.248 - - [09/Dec/2024:17:50:09 +0200] "\x16\x03\x01" 400 226 "-" "-" 104.131.195.248 - - [09/Dec/2024:17:50:09 +0200] "\x16\x03\x01" 400 226 "-" "-" 104.131.195.248 - - [09/Dec/2024:17:50:09 +0200] "GET /form.html HTTP/1.1" 404 196 "-" "curl/8.1.2" ... show less	Hacking Web App Attack
Anonymous	2024-12-10 09:08:04 UTC · (1 year ago)	104.131.195.248 - - [10/Dec/2024:09:08:02 +0000] "GET / HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.195.248 - - [10/Dec/2024:09:08:02 +0000] "GET /for ... show more 104.131.195.248 - - [10/Dec/2024:09:08:02 +0000] "GET / HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.195.248 - - [10/Dec/2024:09:08:02 +0000] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 104.131.195.248 - - [10/Dec/2024:09:08:03 +0000] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 104.131.195.248 - - [10/Dec/2024:09:08:03 +0000] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" 104.131.195.248 - - [10/Dec/2024:09:08:03 +0000] "GET /geoip/ HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.195.248 - - [10/Dec/2024:09:08:03 +0000] "GET /favicon.ico HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.195.248 - - [10/Dec/2024:09:08:03 +0000] "GET /1.php HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; ... show less	FTP Brute-Force
🇺🇸 gu-alvareza	2024-12-10 07:05:20 UTC · (1 year ago)	SystemBC.Botnet	DDoS Attack Hacking
🇫🇷 Murazaki	2024-12-09 23:02:33 UTC · (1 year ago)	104.131.195.248 - - [09/Dec/2024:07:10:56 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xB4\xAB<\x03\x90\xCD\x1Bn\x84\xAE\xC3\x10\xC8 \x92\x11y\xA6\xC2(-\xE9G\x84\|\x98a8\x08\xD13\xD8\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" ... show more 104.131.195.248 - - [09/Dec/2024:07:10:56 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xB4\xAB<\x03\x90\xCD\x1Bn\x84\xAE\xC3\x10\xC8 \x92\x11y\xA6\xC2(-\xE9G\x84\|\x98a8\x08\xD13\xD8\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 500 170 "-" "-" "-" ... show less	Hacking
🇫🇷 Sipherion	2024-12-09 14:11:17 UTC · (1 year ago)	ModSecurity 11 alerts from KEMP	Web App Attack
🇺🇸 mw	2024-12-09 12:46:36 UTC · (1 year ago)	104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET / HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET /for ... show more 104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET / HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET /form.html HTTP/1.1" 404 136 "-" "curl/8.1.2" 104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET /upl.php HTTP/1.1" 404 136 "-" "Mozilla/5.0" 104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET /t4 HTTP/1.1" 404 136 "-" "Mozilla/5.0" 104.131.195.248 - - [09/Dec/2024:06:46:36 -0600] "GET /geoip/ HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 MarKup	2024-12-09 12:42:43 UTC · (1 year ago)	Multiple invalid 404 HTTP requests - Fail2Ban	Hacking Web App Attack
🇺🇸 RiSec	2024-12-09 11:58:55 UTC · (1 year ago)	[Mon Dec 09 11:58:54.954719 2024] [proxy_fcgi:error] [pid 202508] [client 104.131.195.248:47992] AH01071: Got error 'Primary script unknown' ...	Web App Attack
🇺🇸 gu-alvareza	2024-12-09 07:05:22 UTC · (1 year ago)	SystemBC.Botnet	DDoS Attack Hacking
🇨🇿 Countryman	2024-12-09 04:46:34 UTC · (1 year ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇸🇪 webbfabriken	2024-12-09 04:44:30 UTC · (1 year ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI	Web Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 195.63.24.36

🇨🇳 121.29.149.62

🇫🇷 37.187.250.32

🇩🇪 217.181.95.65

🇩🇪 195.63.26.190

🇩🇪 195.63.26.109

🇳🇱 193.47.62.69

🇲🇩 176.123.2.201

🇺🇸 162.216.149.113

🇨🇳 82.156.28.23

🇺🇸 64.62.197.88

🇲🇾 47.254.195.238

🇮🇹 37.103.192.50

🇨🇳 36.132.228.219

🇹🇼 35.236.187.23

🇧🇪 35.210.156.191

🇧🇪 35.210.110.3

🇧🇪 35.195.41.101

🇩🇪 217.181.93.78

🇮🇳 203.192.211.180