This IP address has been reported a total of
37
times from
31 distinct
sources.
104.248.81.143 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Port Scan on Honeypot | Ports: 8080/HTTP-proxy | Proto: TCP(1) | Flags: all SYN | TTL: 54 | Len: 64B ...
show morePort Scan on Honeypot | Ports: 8080/HTTP-proxy | Proto: TCP(1) | Flags: all SYN | TTL: 54 | Len: 64B | Win: 65535(1) | F2B/ufw-honeypot@2026-07-15T14:51:43Z
show less
SP-Scan 63358:1723 detected 2026.07.15 16:20:07
blocked until 2026.09.03 09:22:54
Port Scan
Anonymous
2026-07-14T08:44:17.793890+00:00 gotosocial caddy[69815]: {"level":"info","ts":1784018657.7937436,"l ...
show more2026-07-14T08:44:17.793890+00:00 gotosocial caddy[69815]: {"level":"info","ts":1784018657.7937436,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"104.248.81.143","remote_port":"39112","client_ip":"104.248.81.143","proto":"HTTP/1.1","method":"GET","host":"142.132.177.172","uri":"/squid-internal-mgr/cachemgr.cgi","headers":{"User-Agent":["Mozilla/5.0 zgrab/0.x"],"Accept":["*/*"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000052944,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.177.172/squid-internal-mgr/cachemgr.cgi"],"Content-Type":[]}}
...
show less
Connection to port 80 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1. ...
show moreConnection to port 80 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201
User-Agent: Mozilla/5.0 zgrab/0
show less
Connection to port 8800 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ...
show moreConnection to port 8800 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201:8800
User-Agent: Mozilla/5.0 zg
show less
Honeypot [uk-production01]: HTTP/1.1 request on 52931
GET /squid-internal-mgr/cachemgr.cgi
User-Age ...
show moreHoneypot [uk-production01]: HTTP/1.1 request on 52931
GET /squid-internal-mgr/cachemgr.cgi
User-Agent: Mozilla/5.0 zgrab/0.x
Accept: */*
Accept-Encoding: gzip; 52931 [1] TCP
show less
Connection to port 8080 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ...
show moreConnection to port 8080 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201:8080
User-Agent: Mozilla/5.0 zg
show less
Connection to port 3128 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ...
show moreConnection to port 3128 with data transfer.
Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1
Host: 198.23.188.201:3128
User-Agent: Mozilla/5.0 zg
show less
ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,connectio ...
show morentopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,connection_failed
show less
*Port Scan* detected from 104.248.81.143 (Unknown). 11 hits in the last 145 seconds; Ports: *; Direc ...
show more*Port Scan* detected from 104.248.81.143 (Unknown). 11 hits in the last 145 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Jul 10 07:16:42 kernel: Firewa
show less
...
Jul 10 02:05:36 drop SRC=104.248.81.143 LEN=64 PROTO=TCP DPT=50022 ACK=0 WINDOW=6553 ...
show more...
Jul 10 02:05:36 drop SRC=104.248.81.143 LEN=64 PROTO=TCP DPT=50022 ACK=0 WINDOW=65535 SYN URGP=0 MARK=0x0
show less
Port Scan
Showing 1 to
15
of 37 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩