JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.234.32.218

Recent Activity

Abuse confidence score ?

100% Critical

108 reports

73 reporters · latest 2 days ago

ISP	AS206092 Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	ipxo.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.234.32.218

This IP address has been reported a total of 108 times from 73 distinct sources. 104.234.32.218 was first reported on September 24th 2024, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; United States of America with 6 reports; Finland with 4 reports. The most common categories in these recent reports were: Port Scan 25 times; Hacking 7 times; Brute-Force 5 times; Exploited Host 3 times; Bad Web Bot 3 times; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-09-27 08:12:10 (2 days ago)	Port Scan ...	Port Scan
🇫🇮 6kilowatti	2026-09-27 03:33:11 (2 days ago)	2026-09-27T06:33:10.813665+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-09-27T06:33:10.813665+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=104.234.32.218 DST=10.0.0.30 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=12225 PROTO=TCP SPT=6924 DPT=5061 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-27 02:13:06 (2 days ago)	IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 162 === ATTACK === Signature: ... show more IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 162 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 162 \| SID: 2403461 \| Severity: 2 \| Category: Misc Attack === SOURCE === IP: 104.234.32.218 (IPv4) \| Port: 42994 \| Country: United States \| ISP: VELCOM-16 \| rDNS: None === TARGET === Host: wireguard.goline.ch \| IP: 185.54.80.7 \| Port: 5061 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-09-27 04:13:05 \| Action: Blocked show less	Exploited Host Hacking
🇩🇪 iNetWorker	2026-09-26 23:20:42 (2 days ago)	firewall-block, port(s): 5061/tcp	Port Scan
🇮🇪 RoboSOC	2026-09-26 08:13:33 (3 days ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇹🇷 Domainhizmetleri.com	2026-09-26 06:29:48 (3 days ago)	Source: DH Hunter (Honeypot) \| Reason: TLS Handshake Probe (5061/tcp) [non-standard port]	Port Scan Hacking
🇫🇮 6kilowatti	2026-09-26 06:01:45 (3 days ago)	2026-09-26T09:01:44.933608+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-09-26T09:01:44.933608+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=104.234.32.218 DST=192.168.0.102 LEN=44 TOS=0x18 PREC=0x20 TTL=244 ID=24350 PROTO=TCP SPT=13169 DPT=5061 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-09-26 05:34:01 (3 days ago)	IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 162 === ATTACK === Signature: ... show more IDS Alert: ET CINS Active Threat Intelligence Poor Reputation IP group 162 === ATTACK === Signature: ET CINS Active Threat Intelligence Poor Reputation IP group 162 \| SID: 2403461 \| Severity: 2 \| Category: Misc Attack === SOURCE === IP: 104.234.32.218 (IPv4) \| Port: 42994 \| Country: United States \| ISP: VELCOM-16 \| rDNS: None === TARGET === Host: wireguard.goline.ch \| IP: 185.54.80.7 \| Port: 5061 \| Protocol: TCP \| App: N/A === RESPONSE === Time: 2026-09-26 07:34:01 \| Action: Blocked show less	Exploited Host Hacking
Anonymous	2026-09-26 02:29:04 (3 days ago)	[TCP/5061] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
🇧🇷 diego	2026-09-26 00:43:14 (3 days ago)	[rede-168-134] 09/25/2026-21:43:14.506184, 104.234.32.218, Protocol: 6, ET CINS Active Threat Intell ... show more [rede-168-134] 09/25/2026-21:43:14.506184, 104.234.32.218, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 162 show less	Hacking
🇩🇪 Admins@Storch	2026-09-25 17:34:02 (3 days ago)	IPS:drop <match> dstport=5061	Brute-Force Exploited Host
🇩🇪 reznekcs	2026-09-25 05:00:21 (4 days ago)	Blocked by UFW firewall	Brute-Force
🇧🇾 stroytrest	2026-09-25 01:33:03 (4 days ago)	2026-09-25T04:33:02.605476+03:00 gate kernel: [247248.770867] nftables: JAIL-SIP IN=wan OUT= MAC= SR ... show more 2026-09-25T04:33:02.605476+03:00 gate kernel: [247248.770867] nftables: JAIL-SIP IN=wan OUT= MAC= SRC=104.234.32.218 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=1714 PROTO=TCP SPT=63399 DPT=5061 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-09-25 00:36:31 (4 days ago)	Blocked by UFW (TCP on 5061) Source port: 38180 TTL: 244 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5061) Source port: 38180 TTL: 244 Packet length: 40 TOS: 0x08 This report (for 104.234.32.218) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-09-24 23:57:36 (4 days ago)	Blocked by UFW (TCP on 5061) Source port: 62713 TTL: 244 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5061) Source port: 62713 TTL: 244 Packet length: 40 TOS: 0x08 This report (for 104.234.32.218) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.223

🇲🇽 187.190.229.182

🇮🇩 103.31.133.85

🇧🇾 95.46.206.2

🇳🇱 94.154.43.61

🇺🇸 91.230.168.160

🇳🇱 91.92.42.89

🇺🇸 70.169.21.167

🇩🇪 69.5.169.43

🇨🇱 45.162.134.141

🇳🇱 45.148.10.141

🇨🇳 36.28.136.207

🇨🇳 36.21.139.218

🇬🇧 35.203.210.13

🇨🇳 27.11.198.252

🇨🇳 14.20.73.11

🇭🇰 2401:2660:216:70ad:d147:8956:17a5:b38c

🇨🇳 222.219.131.47

🇰🇷 210.183.21.53

🇧🇷 200.102.200.169