JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.193.135.211

104.193.135.211 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 0%: ?

ISP	Tech Futures Interactive Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS394256
Domain Name	techfutures.xyz
Country	🇨🇦 Canada
City	Vancouver, British Columbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.193.135.211

Whois 104.193.135.211

IP Abuse Reports for 104.193.135.211:

This IP address has been reported a total of 39 times from 27 distinct sources. 104.193.135.211 was first reported on June 10th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-06-02 15:16:56 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 36294 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 36294 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-01 22:50:17 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 psh-ack	2026-02-28 01:17:15 (4 months ago)	Two SSH sessions from 104.193.135.211 using the credential administrator/1234 between 2026-02-27 20: ... show more Two SSH sessions from 104.193.135.211 using the credential administrator/1234 between 2026-02-27 20:15:08 and 20:15:09. The attacker attempted port forwarding to four external hosts across ports 80 and 443 (128.199.207.131, 104.17.24.14, 142.251.141.74), likely for establishing C2 communication or lateral movement, but did not execute any shell commands during the brief connection window. show less	Brute-Force SSH Hacking
🇺🇸 psh-ack	2026-02-28 00:31:41 (4 months ago)	Attacker established 2 SSH sessions using weak credentials (administrator/1234) via OpenSSH 10.0-hpn ... show more Attacker established 2 SSH sessions using weak credentials (administrator/1234) via OpenSSH 10.0-hpn14v15 client and attempted port forwarding to four external destinations across ports 80 and 443, suggesting reconnaissance or lateral movement activity. No commands were executed and no malware artifacts were recovered during these sessions. show less	Brute-Force SSH Hacking
🇺🇸 psh-ack	2026-02-27 23:31:38 (4 months ago)	Attacker established 2 SSH sessions using weak credentials (administrator/1234) and attempted multip ... show more Attacker established 2 SSH sessions using weak credentials (administrator/1234) and attempted multiple port forwarding connections to external hosts on ports 80 and 443, suggesting reconnaissance or preparation for data exfiltration or command and control communication. No commands were executed and no malware artifacts were recovered during this activity. show less	Brute-Force SSH Hacking
🇺🇸 psh-ack	2026-02-27 23:16:31 (4 months ago)	This IP conducted 2 SSH sessions using weak credentials (administrator/1234) and attempted port forw ... show more This IP conducted 2 SSH sessions using weak credentials (administrator/1234) and attempted port forwarding to three external HTTPS destinations (128.199.207.131:443, 142.251.37.10:443, 104.17.25.14:443), suggesting reconnaissance or preparation for command and control communication or lateral movement. No commands were executed and no malware artifacts were recovered during the attack window. show less	Brute-Force SSH Hacking
Anonymous	2026-02-04 03:55:08 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-01 03:50:23 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇨🇭 backslash	2026-01-10 07:46:10 (6 months ago)		SQL Injection
🇳🇱 jjnxpct	2026-01-07 04:48:13 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /component/acym/frontusers (Rule ID: 942100) - SQL Injection Attack Detected via libinjection show less	SQL Injection Web App Attack
🇺🇸 nathan-m	2026-01-06 17:43:00 (6 months ago)	Bulk (hundreds per minute) requests to single newsletter signup endpoint	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-01-06 17:33:44 (6 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-01-06 17:29:13 (6 months ago)	SQL injection, multiple attempts.	SQL Injection
🇳🇱 Savvii	2026-01-06 17:28:56 (6 months ago)	20 attempts against mh-misbehave-ban on hydra	Brute-Force Bad Web Bot Web App Attack
🇯🇵 mkaraki	2025-12-06 04:07:18 (7 months ago)	1764994028 # Service_probe # SIGNATURE_SEND # source_ip:104.193.135.211 # dst_port:80 ...	Port Scan

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 152.58.86.200

🇫🇮 46.29.26.195

🇨🇱 45.166.147.237

🇳🇱 45.148.10.147

🇺🇸 2a0a:8c43::17f

🇧🇷 187.110.238.50

🇺🇸 184.105.139.124

🇮🇩 160.187.174.22

🇧🇷 138.204.90.117

🇷🇺 87.250.224.112

🇺🇸 54.80.185.200

🇱🇹 45.227.254.170

🇸🇪 31.208.59.48

🇺🇸 20.169.104.65

🇺🇸 162.216.149.34

🇸🇬 128.199.241.199

🇨🇳 116.172.248.159

🇨🇳 113.87.138.62

🇷🇴 92.118.39.77

🇫🇷 91.196.152.180