JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.36.27

104.131.36.27 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 68%: ?

68%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.36.27

Whois 104.131.36.27

IP Abuse Reports for 104.131.36.27:

This IP address has been reported a total of 12 times from 12 distinct sources. 104.131.36.27 was first reported on June 5th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 WebServ	2026-06-05 16:35:39 (5 days ago)	Blocked by ufw after 5 attempts in last 300s.	Brute-Force
🇨🇿 Countryman	2026-06-05 15:26:49 (5 days ago)	repeated unauthorized SSL VPN connection attempts	DDoS Attack Hacking Brute-Force
Anonymous	2026-06-05 13:09:06 (5 days ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 ISPLtd	2026-06-05 13:03:48 (5 days ago)	Jun 5 08:17:10 104.131.36.27 TCP SPT=56107 DPT=8888 SYN Jun 5 08:23:47 104.131.36.27 TCP SPT=56107 ... show more Jun 5 08:17:10 104.131.36.27 TCP SPT=56107 DPT=8888 SYN Jun 5 08:23:47 104.131.36.27 TCP SPT=56107 DPT=8000 SYN Jun 5 10:03:47 104.131.36.27 TCP SPT=56107 DPT=8082 ... show less	Port Scan
🇳🇱 Yachiyo Runami	2026-06-05 12:30:26 (5 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 243 \| Len: 40B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 243 \| Len: 40B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-06-05T12:30:26Z show less	Port Scan Hacking
🇺🇸 rellim.com	2026-06-05 11:27:32 (5 days ago)	Jun 5 04:19:37 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ... show more Jun 5 04:19:37 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=104.131.36.27 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=13871 PROTO=TCP SPT=56107 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 5 04:25:34 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=104.131.36.27 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=1031 PROTO=TCP SPT=56107 DPT=8088 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 5 04:27:32 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=104.131.36.27 DST=204.17.205.254 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=20679 PROTO=TCP SPT=56107 DPT=8082 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-05 11:23:55 (5 days ago)	2026-06-05T12:23:55.055192+01:00 vps kernel: [42398800.332733] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-05T12:23:55.055192+01:00 vps kernel: [42398800.332733] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=104.131.36.27 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=16782 PROTO=TCP SPT=56107 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇳🇵 radheykrishna.com.np	2026-06-05 11:13:44 (5 days ago)	Jun 5 16:58:43 kernel: [4147833.176418] [UFW BLOCK] IN=ens160 OUT= SRC=104.131.36.27 LEN=40 TOS=0x0 ... show more Jun 5 16:58:43 kernel: [4147833.176418] [UFW BLOCK] IN=ens160 OUT= SRC=104.131.36.27 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=8986 PROTO=TCP SPT=56107 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 zupan	2026-06-05 11:01:22 (5 days ago)	Blocked by UFW on vps [8000/tcp] \| SPT: 56107 \| TTL: 235 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [8000/tcp] \| SPT: 56107 \| TTL: 235 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sumnone	2026-06-05 10:59:16 (5 days ago)	Port probing on unauthorized port 8083	Port Scan Hacking Exploited Host
🇯🇵 jay hung	2026-06-05 10:56:43 (5 days ago)	2026-06-05T10:56:42.831277+00:00 quarktech kernel: [491843.677185] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-05T10:56:42.831277+00:00 quarktech kernel: [491843.677185] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=104.131.36.27 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x40 TTL=231 ID=34117 PROTO=TCP SPT=56107 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Elysium Security	2026-06-05 10:45:07 (5 days ago)	Mass port scanning on a whole network	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.49.216

🇳🇱 77.83.39.197

🇺🇸 76.76.250.148

🇰🇿 37.150.87.223

🇻🇪 190.97.239.209

🇦🇷 190.5.160.95

🇨🇳 120.48.67.47

🇨🇳 111.228.13.226

🇧🇬 91.92.40.204

🇪🇸 79.112.60.48

🇮🇳 34.93.128.179

🇮🇩 203.175.125.185

🇮🇶 169.224.5.20

🇩🇪 167.94.146.73

🇮🇩 140.213.133.56

🇺🇸 45.156.129.97

🇳🇱 45.148.10.147

🇺🇸 43.162.112.238

🇷🇴 2.57.122.238

🇯🇵 172.105.197.151