JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.164.126.126

104.164.126.126 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 39%: ?

39%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.164.126.126

Whois 104.164.126.126

IP Abuse Reports for 104.164.126.126:

This IP address has been reported a total of 38 times from 29 distinct sources. 104.164.126.126 was first reported on July 8th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 cityhunter_rhone	2026-08-23 03:06:06 (1 day ago)	Fail2Ban offender in jail [recidive] — 1 total attempts — tracked by mercurius-guide.com security sy ... show more Fail2Ban offender in jail [recidive] — 1 total attempts — tracked by mercurius-guide.com security system. show less	SSH Brute-Force
🇵🇱 Budyn	2026-08-20 21:17:48 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.budyn.ovh \| URI: /wp-admin/ \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-20 06:18:11 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dev.astropot.website \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-19 06:24:02 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.definitelynotahoneypot.online \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Rip	2026-08-15 11:08:21 (1 week ago)	WordPress fingerprinting and attack surface probing	Port Scan Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-13 01:32:26 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇵🇱 Budyn	2026-08-11 18:57:25 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.website \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-08-01 09:00:04 (3 weeks ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇺🇸 SSH-Admin	2026-08-01 08:40:03 (3 weeks ago)	Probing for Exploits on ns007	Exploited Host Web App Attack
🇭🇺 kranem	2026-07-18 18:00:11 (1 month ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 18779 (EGIHosting) Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 18779 (EGIHosting) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-18T17:17:42Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-07-16 22:25:29 (1 month ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-15 22:25:27 (1 month ago)		Brute-Force Web App Attack
🇩🇪 DocNetzwerk	2026-07-15 17:00:00 (1 month ago)	(php-url-fopen) Failed php-url-fopen trigger from 104.164.126.126 (US/United States/-)	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-07-04 08:38:50 (1 month ago)	Web brute-force / failed auth detected. Evidence: [Sat Jul 04 08:38:49.256461 2026] [access_compat:e ... show more Web brute-force / failed auth detected. Evidence: [Sat Jul 04 08:38:49.256461 2026] [access_compat:error] [pid 369273] [client 104.164.126.126:0] AH01797: client denied by server configuration: [WEB_ROOT]/xmlrpc.php [Sat Jul 04 08:38:49.910639 2026] [access_compat:error] [pid 369422] [client 104.164.126.126:0] AH01797: client denied by server configuration: [WEB_ROOT]/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-28 12:59:48 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2468	Exploited Host Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇮🇹 172.213.25.50

🇺🇸 136.144.19.204

🇰🇷 222.99.31.54

🇧🇩 210.1.247.206

🇮🇳 122.175.10.171

🇨🇳 106.4.161.91

🇺🇸 104.23.160.12

🇱🇻 94.158.20.37

🇩🇪 57.129.74.123

🇨🇳 36.106.166.96

🇺🇸 104.23.160.91

🇭🇰 43.242.203.160

🇸🇬 43.134.189.197

🇬🇧 35.203.211.3

🇱🇹 213.176.26.82

🇲🇽 158.23.162.109

🇨🇳 112.74.101.87

🇳🇱 95.173.207.168

🇺🇸 65.60.54.138