JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.52.158

104.131.52.158 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 55%: ?

55%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.52.158

Whois 104.131.52.158

IP Abuse Reports for 104.131.52.158:

This IP address has been reported a total of 18 times from 8 distinct sources. 104.131.52.158 was first reported on June 21st 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-06-21 07:59:43 (12 hours ago)	(PERMBLOCK) 104.131.52.158 (US/United States/-) has had more than 4 temp blocks	Hacking
🇩🇪 maxpower	2026-06-21 07:45:45 (12 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:09:19:09 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:09:19:09 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:09:32:23 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:09:32:23 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:09:45:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 maxpower	2026-06-21 07:06:14 (13 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:08:40:13 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:40:13 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:53:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:53:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:09:06:12 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 maxpower	2026-06-21 06:27:41 (13 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:08:01:57 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:01:57 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:14:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:14:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:08:27:27 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 maxpower	2026-06-21 05:49:27 (14 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:07:24:34 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:24:34 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:36:53 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:36:53 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:49:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 ger-stg-sifi1	2026-06-21 05:35:11 (14 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 maxpower	2026-06-21 05:12:25 (15 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:06:50:08 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:50:08 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:00:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:00:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:07:12:20 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 maxpower	2026-06-21 04:39:26 (15 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:06:18:17 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:18:17 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:28:45 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:28:45 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:39:19 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 maxpower	2026-06-21 04:09:11 (16 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:05:53:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:53:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:01:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:01:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:06:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇩🇪 maxpower	2026-06-21 03:46:46 (16 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:05:26:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:26:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:39:29 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:39:29 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:46:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇺🇸 integrantservices.com	2026-06-21 03:33:00 (16 hours ago)	(wordpress) Failed wordpress login from 104.131.52.158 (US/United States/-)	Brute-Force
🇮🇹 VHosting	2026-06-21 03:25:03 (17 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-21 03:21:43 (17 hours ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇩🇪 maxpower	2026-06-21 03:20:27 (17 hours ago)	(wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; ... show more (wp_login) REGOLA 1 - WP Login Attack 104.131.52.158 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.131.52.158 - - [21/Jun/2026:05:09:28 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:09:28 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:15:00 +0200] "POST /wp-login.php HTTP/1.1" 200 9857 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:15:00 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com 104.131.52.158 - - [21/Jun/2026:05:20:21 +0200] "POST /wp-login.php HTTP/1.1" 200 9859 "-" "Mozilla/5.0" "-" host=kleos81.com show less	Port Scan
🇦🇺 screwlooseit.com.au	2026-06-21 03:19:57 (17 hours ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.30.36.67

🇺🇸 192.0.99.203

🇳🇱 176.65.139.236

🇳🇱 176.65.139.219

🇮🇳 103.54.101.248

🇷🇺 94.243.12.92

🇳🇱 77.83.39.98

🇰🇷 43.155.237.241

🇷🇺 37.128.240.47

🇨🇳 14.103.122.182

🇰🇷 1.235.192.214

🇩🇪 212.30.36.66

🇩🇪 212.30.36.65

🇮🇳 122.160.221.219

🇷🇺 94.243.10.50

🇧🇬 78.128.114.58

🇷🇴 2.57.122.238

🇹🇼 221.120.57.172

🇩🇪 212.30.36.64

🇧🇷 205.210.31.180