JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.164.126.131

104.164.126.131 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 19%: ?

19%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.164.126.131

Whois 104.164.126.131

IP Abuse Reports for 104.164.126.131:

This IP address has been reported a total of 40 times from 24 distinct sources. 104.164.126.131 was first reported on June 26th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-19 00:01:21 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.store \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-15 21:27:39 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.budyn.ovh \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-15 14:30:46 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.astropot.online \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-14 03:56:25 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.astropot.site \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-13 09:48:29 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.teddypot.space \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇦 st-secure-team	2026-08-03 08:11:06 (2 weeks ago)	Плохой бот. Зафиксированы: фейковый User-Agent (выдаёт себя за браузер), сканирование, перебор, брут ... show more Плохой бот. Зафиксированы: фейковый User-Agent (выдаёт себя за браузер), сканирование, перебор, брутфорс, обращение к /ip.php, /robots.txt, поиск уязвимостей. Заблокирован на нашем сайте. show less	Bad Web Bot
🇮🇹 VHosting	2026-07-02 04:35:09 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇵🇱 dcnet	2026-06-22 14:00:07 (1 month ago)	FortiGate detected DOS attack from IPv4 address 104.164.126.131	DDoS Attack
🇺🇸 mnsf	2026-06-20 06:05:44 (2 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇮🇹 VHosting	2026-05-22 03:25:03 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 findlab	2026-05-17 08:15:01 (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-06 11:29:54 (3 months ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 kosada.com	2026-05-03 14:11:24 (3 months ago)	Web vulnerability probing: /https%3A/kosada.com/%23main-content	Web App Attack
🇨🇭 backslash	2026-04-29 02:57:02 (3 months ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇪🇸 gnom4ik	2026-02-21 14:51:00 (6 months ago)	ban-reviewer auto report; ip=104.164.126.131; scenario=http:scan; verdict=valid_ban; confidence=0.85 ... show more ban-reviewer auto report; ip=104.164.126.131; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; AbuseIPDB category 14 (Port Scan) is applicable; Decision made within a short time window indicating immediate threat show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.72.164.185

🇧🇷 200.155.170.113

🇺🇾 167.56.174.114

🇭🇰 101.36.127.85

🇮🇹 83.224.155.19

🇺🇸 66.132.186.231

🇺🇸 45.156.129.117

🇭🇰 42.200.66.164

🇺🇸 35.237.16.245

🇵🇭 210.1.66.154

🇧🇷 189.56.195.78

🇧🇷 187.72.180.57

🇫🇷 185.177.72.30

🇦🇷 153.67.7.88

🇺🇸 146.88.241.120

🇨🇳 117.29.44.48

🇺🇸 109.105.209.8

🇳🇱 89.248.163.168

🇹🇷 78.187.9.53

🇺🇸 66.132.186.242