JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.164.173.171

104.164.173.171 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 25%: ?

25%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.164.173.171

Whois 104.164.173.171

IP Abuse Reports for 104.164.173.171:

This IP address has been reported a total of 66 times from 33 distinct sources. 104.164.173.171 was first reported on July 1st 2023, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-09-01 23:45:03 (14 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-29 18:36:37 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: telemetry.teddypot.site \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-24 12:13:44 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.budyn.xyz \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-20 17:33:59 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.teddypot.tech \| URI: /backup.sql \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 Alvino	2026-08-14 07:04:29 (2 weeks ago)	Blocked due to using a VPN or data center IP with abuse: 21	Web Spam VPN IP
🇵🇱 Budyn	2026-08-12 13:31:04 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.astropot.store \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2026-07-24 07:08:14 (1 month ago)	tcp/443 (8 or more attempts)	Port Scan
Anonymous	2026-06-30 16:02:10 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-25 08:53:15 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 VHosting	2026-06-16 12:45:03 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 01:32:21 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 104.164.173.171 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 104.164.173.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 21:32:13.996005 2026] [security2:error] [pid 21968:tid 21968] [client 104.164.173.171:54638] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gapanda.unionega.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gapanda.unionega.com"] [uri "/php-old.ini"] [unique_id "agfJHeQdWhTPR2JWqGL-SgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-03 01:01:22 (3 months ago)	Try to access /https%3A/site00.wierenga-reclame.nl/xmlrpc.php	Web App Attack
🇨🇭 backslash	2026-04-20 02:51:02 (4 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇬🇧 cybersteve99	2026-02-16 03:47:04 (6 months ago)	Too many 4xx Requests -	Brute-Force Web App Attack
Anonymous	2026-01-31 05:18:23 (7 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 110.227.211.82

🇺🇸 71.19.192.251

🇦🇷 45.234.121.10

🇳🇱 45.148.10.141

🇮🇳 35.200.233.111

🇩🇪 31.70.84.142

🇺🇸 216.218.206.121

🇺🇸 195.184.76.114

🇺🇸 91.230.168.2

🇫🇷 185.177.72.38

🇲🇴 182.93.50.90

🇻🇳 171.245.68.49

🇦🇺 170.64.132.240

🇦🇺 123.243.126.39

🇺🇸 107.203.74.250

🇮🇳 66.116.242.235

🇺🇸 64.62.156.219

🇷🇺 62.16.41.154

🇬🇧 45.82.76.118

🇭🇰 34.150.68.6