JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.164.173.104

104.164.173.104 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 23%: ?

23%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.164.173.104

Whois 104.164.173.104

IP Abuse Reports for 104.164.173.104:

This IP address has been reported a total of 97 times from 46 distinct sources. 104.164.173.104 was first reported on May 30th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-31 09:20:50 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.teddypot.cloud \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-29 12:20:50 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: radius.goblinpot.online \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-25 03:23:57 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.teddypot.space \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-20 08:32:04 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2467	Exploited Host Web App Attack
🇵🇱 Budyn	2026-08-07 17:25:21 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.goblinpot.space \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 lavnet.net	2026-07-17 11:44:51 (1 month ago)	[Fri Jul 17 11:44:41.690398 2026] [authz_core:error] [pid 2660225:tid 2660309] [client 104.164.173.1 ... show more [Fri Jul 17 11:44:41.690398 2026] [authz_core:error] [pid 2660225:tid 2660309] [client 104.164.173.104:10832] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php [Fri Jul 17 11:44:41.690605 2026] [authz_core:error] [pid 2660225:tid 2660309] [client 104.164.173.104:10832] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php [Fri Jul 17 11:44:50.210357 2026] [authz_core:error] [pid 2660223:tid 2660274] [client 104.164.173.104:6052] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php ... show less	Brute-Force
Anonymous	2026-07-06 22:02:09 (1 month ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 Rip	2026-07-05 10:30:39 (1 month ago)	Automated recon attempt targeting restricted and sensitive paths.	Web App Attack
🇺🇸 Rip	2026-07-03 10:48:45 (1 month ago)	WordPress fingerprinting and attack surface probing	Port Scan Web App Attack
🇫🇷 Neoloop	2026-06-30 01:28:43 (2 months ago)	[Tue Jun 30 03:28:41.915927 2026] [authz_core:error] [pid 3305144] [client 104.164.173.104:32580] AH ... show more [Tue Jun 30 03:28:41.915927 2026] [authz_core:error] [pid 3305144] [client 104.164.173.104:32580] AH01630: client denied by server configuration: /var/www/html/nadejezkamionu.cz/sub/panel/uploads/articles/.php [Tue Jun 30 03:28:42.107914 2026] [authz_core:error] [pid 3319707] [client 104.164.173.104:32558] AH01630: client denied by server configuration: /var/www/html/nadejezkamionu.cz/sub/panel/uploads/albums/.php [Tue Jun 30 03:28:42.171500 2026] [authz_core:error] [pid 3320239] [client 104.164.173.104:32532] AH01630: client denied by server configuration: /var/www/html/nadejezkamionu.cz/sub/panel/uploads/events/.php [Tue Jun 30 03:28:42.517630 2026] [authz_core:error] [pid 3319707] [client 104.164.173.104:32558] AH01630: client denied by server configuration: /var/www/html/nadejezkamionu.cz/sub/panel/uploads/products/.php [Tue Jun 30 03:28:42.686755 2026] [authz_core:error] [pid 3305144] [client 104.164.173.104:32580] AH01630: client denied by server configuration: /var/www/html/nade ... show less	Brute-Force
🇮🇹 VHosting	2026-06-16 07:55:03 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-14 04:30:39 (2 months ago)	Try to connect to Port_Scan_443_stealth	Port Scan
🇩🇪 bescared	2026-05-17 18:21:36 (3 months ago)	F2B - Malicious activity detected. DoS / Heavy Crawling. -8ff06ede-	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-04 10:05:38 (3 months ago)	Too many Status 40X (14)	Brute-Force Web App Attack
🇬🇧 Shadymint	2026-04-28 12:00:33 (4 months ago)	url probing	Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.177

🇫🇷 91.231.89.204

🇨🇳 47.101.206.31

🇯🇵 34.97.207.213

🇰🇷 218.149.235.152

🇳🇱 213.177.179.155

🇨🇺 181.225.233.247

🇯🇵 119.25.157.105

🇮🇳 117.252.93.114

🇺🇸 103.143.10.140

🇳🇱 93.123.109.234

🇺🇸 64.190.237.156

🇰🇷 61.81.141.186

🇺🇸 45.26.184.5

🇵🇱 217.60.33.67

🇺🇸 205.210.31.17

🇨🇳 183.199.147.166

🇺🇸 144.172.108.80

🇺🇸 96.245.6.15

🇷🇺 94.72.35.226