JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.189.83.104

206.189.83.104 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 31%: ?

31%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.189.83.104

Whois 206.189.83.104

IP Abuse Reports for 206.189.83.104:

This IP address has been reported a total of 60 times from 48 distinct sources. 206.189.83.104 was first reported on May 9th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-07-07 20:49:13 (5 days ago)	[Wed Jul 01 06:58:18.658980 2026] [access_compat:error] [pid 925717:tid 124097241544384] [client 206 ... show more [Wed Jul 01 06:58:18.658980 2026] [access_compat:error] [pid 925717:tid 124097241544384] [client 206.189.83.104:33346] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:04:02.519285 2026] [access_compat:error] [pid 1005255:tid 124095228278464] [client 206.189.83.104:53992] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:06:08.597785 2026] [access_compat:error] [pid 1005255:tid 124098340431552] [client 206.189.83.104:50648] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:26:50.932400 2026] [access_compat:error] [pid 1301506:tid 124097820346048] [client 206.189.83.104:57928] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:29:37.706314 2026] [access_compat:error] [pid 1311187:tid 124098684368576] [client 206.189.83.104:49180] AH01797: client denied by server configuration: proxy:http://localhost:4000/ ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-07-06 15:10:23 (6 days ago)	[Wed Jul 01 06:58:18.658980 2026] [access_compat:error] [pid 925717:tid 124097241544384] [client 206 ... show more [Wed Jul 01 06:58:18.658980 2026] [access_compat:error] [pid 925717:tid 124097241544384] [client 206.189.83.104:33346] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:04:02.519285 2026] [access_compat:error] [pid 1005255:tid 124095228278464] [client 206.189.83.104:53992] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:06:08.597785 2026] [access_compat:error] [pid 1005255:tid 124098340431552] [client 206.189.83.104:50648] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:26:50.932400 2026] [access_compat:error] [pid 1301506:tid 124097820346048] [client 206.189.83.104:57928] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:29:37.706314 2026] [access_compat:error] [pid 1311187:tid 124098684368576] [client 206.189.83.104:49180] AH01797: client denied by server configuration: proxy:http://localhost:4000/ ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-07-02 14:51:59 (1 week ago)	Blocked by UFW (TCP on 8118) Source port: 60394 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 60394 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 206.189.83.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 demonsword	2026-07-02 08:20:08 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.mobilis.ae:443:443 show less	Open Proxy Port Scan
🇨🇿 Countryman	2026-07-02 05:00:29 (1 week ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇺🇸 xmission.com	2026-07-02 02:14:59 (1 week ago)	Blocked by UFW (TCP on 8118) Source port: 55062 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 55062 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 206.189.83.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Rayulcifer	2026-07-01 12:29:38 (1 week ago)	[Wed Jul 01 06:58:18.658980 2026] [access_compat:error] [pid 925717:tid 124097241544384] [client 206 ... show more [Wed Jul 01 06:58:18.658980 2026] [access_compat:error] [pid 925717:tid 124097241544384] [client 206.189.83.104:33346] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:04:02.519285 2026] [access_compat:error] [pid 1005255:tid 124095228278464] [client 206.189.83.104:53992] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:06:08.597785 2026] [access_compat:error] [pid 1005255:tid 124098340431552] [client 206.189.83.104:50648] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:26:50.932400 2026] [access_compat:error] [pid 1301506:tid 124097820346048] [client 206.189.83.104:57928] AH01797: client denied by server configuration: proxy:http://localhost:4000/ [Wed Jul 01 07:29:37.706314 2026] [access_compat:error] [pid 1311187:tid 124098684368576] [client 206.189.83.104:49180] AH01797: client denied by server configuration: proxy:http://localhost:4000/ ... show less	Brute-Force SSH
🇧🇬 HighWay	2026-07-01 09:10:00 (1 week ago)	206.189.83.104 - - [01/Jul/2026:09:02:42 +0000] "CONNECT fizjoterapiarymanowski.pl:443:443 HTTP/1.1" ... show more 206.189.83.104 - - [01/Jul/2026:09:02:42 +0000] "CONNECT fizjoterapiarymanowski.pl:443:443 HTTP/1.1" 400 392 "-" "-" 206.189.83.104 - - [01/Jul/2026:09:08:37 +0000] "CONNECT kanoferie.dk:443:443 HTTP/1.1" 400 392 "-" "-" 206.189.83.104 - - [01/Jul/2026:09:09:58 +0000] "CONNECT kanoferie.dk:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Hacking Port Scan
🇯🇵 demonsword	2026-07-01 08:05:23 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: fizjoterapiarymanowski.pl:443:443 show less	Open Proxy Port Scan
🇫🇷 dynamix	2025-11-27 10:58:59 (7 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 whitehat AbuseIPDB Official	2025-11-03 13:19:49 (8 months ago)	2025-11-03T13:19:40.203757shield sshd\[663\]: pam_unix\(sshd:auth\): authentication failure\; lognam ... show more 2025-11-03T13:19:40.203757shield sshd\[663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.83.104 user=root 2025-11-03T13:19:42.682792shield sshd\[663\]: Failed password for root from 206.189.83.104 port 36836 ssh2 2025-11-03T13:19:44.488367shield sshd\[665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.83.104 user=root 2025-11-03T13:19:46.515821shield sshd\[665\]: Failed password for root from 206.189.83.104 port 36842 ssh2 2025-11-03T13:19:48.272005shield sshd\[675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.83.104 user=root show less	Brute-Force SSH
Anonymous	2025-11-03 07:52:21 (8 months ago)	Honeypot hit.	Port Scan Hacking Exploited Host
🇩🇪 iNetWorker	2025-11-03 05:04:35 (8 months ago)	trying to access non-authorized port	Port Scan
🇫🇷 security.rdmc.fr	2025-11-02 22:47:27 (8 months ago)	VoIP Attack proto:UDP src:8000 dst:5060	Fraud VoIP Port Scan
Anonymous	2023-01-03 02:07:56 (3 years ago)	T: f2b 404 5x	Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.107.38.180

🇸🇬 188.166.253.44

🇨🇳 122.227.174.246

🇱🇰 112.135.217.222

🇺🇸 107.172.168.193

🇧🇬 79.124.56.138

🇺🇸 64.62.197.29

🇺🇸 54.90.153.106

🇳🇱 45.153.34.151

🇻🇳 14.225.206.171

🇩🇪 213.209.159.228

🇧🇷 186.251.71.202

🇺🇸 147.185.132.210

🇺🇸 141.11.88.248

🇮🇳 103.159.85.123

🇺🇸 103.143.10.140

🇨🇦 85.217.149.73

🇫🇷 85.217.140.44

🇨🇦 72.251.5.158

🇹🇭 43.128.207.5