JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.164.173.200

104.164.173.200 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 22%: ?

22%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.164.173.200

Whois 104.164.173.200

IP Abuse Reports for 104.164.173.200:

This IP address has been reported a total of 74 times from 32 distinct sources. 104.164.173.200 was first reported on June 23rd 2023, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-10-22 04:13:50 (10 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.astropot.online \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.164.173.200","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,image\/apng,* show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-11 21:23:06 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.sweetpuddingtrap.top \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 mawan	2026-10-11 02:38:40 (1 week ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇵🇱 Budyn	2026-10-08 21:07:37 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.astropot.store \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-05 03:18:44 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.teddypot.website \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-21 15:27:42 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.sweetpuddingtrap.xyz \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-09-16 06:33:24 (1 month ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇵🇱 Budyn	2026-09-16 00:11:28 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.sweetpuddingtrap.online \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-03 10:13:03 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.astropot.store \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-01 22:10:03 (1 month ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-24 06:21:15 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.goblinpot.space \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-08-10 21:02:44 (2 months ago)	Port scanning / recon \| Evidence: date=2026-08-10 time=23:01:31 devname="[redacted]" devid="[redacte ... show more Port scanning / recon \| Evidence: date=2026-08-10 time=23:01:31 devname="[redacted]" devid="[redacted]" eventtime=1786395690898930109 tz=\"+0200\" logid=\"0000000013\" type=\"traffic\" subtype=\"forward\" level=\"notice\" vd="[redacted]" srcip=104.164.173.200 srcport=61418 srcintf="[redacted]" srcintfrole=\"wan\" dstip=[redacted] dstport=443 dstintf="[redacted]" dstintfrole=\"lan\" srccountry=\"United States\" dstcountry=\"Spain\" \| ASN: EGIHOSTING \| Country: US show less	Port Scan Web App Attack
🇮🇹 VHosting	2026-07-02 05:55:07 (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 YF	2026-06-11 10:00:20 (4 months ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇨🇦 SSH-Admin	2026-06-10 19:00:05 (4 months ago)	Probing for Exploits on ns200	Exploited Host Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.219

🇧🇩 182.48.80.240

🇨🇳 180.102.110.170

🇵🇰 175.107.233.231

🇺🇸 172.68.58.145

🇮🇹 162.158.116.98

🇩🇪 159.89.13.98

🇷🇴 92.118.39.224

🇫🇷 91.231.89.231

🇨🇳 36.104.147.6

🇰🇿 212.154.234.9

🇬🇧 200.138.46.90

🇷🇴 193.32.162.84

🇦🇲 172.70.186.130

🇺🇸 172.70.83.20

🇺🇸 172.68.54.218

🇺🇸 162.216.149.107

🇮🇷 85.198.19.251

🇮🇪 54.155.200.141

🇫🇷 45.95.174.62