JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.164.173.64

104.164.173.64 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 24%: ?

24%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.164.173.64

Whois 104.164.173.64

IP Abuse Reports for 104.164.173.64:

This IP address has been reported a total of 75 times from 39 distinct sources. 104.164.173.64 was first reported on June 6th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-08-15 14:22:30 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: git.astropot.space \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-14 06:21:49 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.goblinpot.tech \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-12 03:27:46 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.goblinpot.space \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-07 18:25:11 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.sweetpuddingtrap.online \| URI: /config.php.bak \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-26 22:18:00 (4 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇷🇴 INTEQ	2026-07-25 21:36:16 (4 weeks ago)	Web attack from 104.164.173.64	Web App Attack
Anonymous	2026-07-15 07:49:20 (1 month ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-07-10 11:14:00 (1 month ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack
🇬🇧 Shadymint	2026-06-27 18:22:22 (1 month ago)	url probing	Web App Attack
🇮🇹 VHosting	2026-06-23 10:40:08 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 wsyq	2026-06-14 00:56:54 (2 months ago)	Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource ...	Bad Web Bot Web App Attack
🇮🇹 ciccio diddo	2026-05-24 09:09:52 (3 months ago)	CMS/WP Exploit multiple 404 port:Tcp/80,443	Brute-Force Web App Attack
🇫🇮 payincog	2026-05-19 23:03:32 (3 months ago)	Date: 20/May/2026:01:25:23.191678 +0300 \| Reported IP: 104.164.173.64 mod_security \| id: 920350 9301 ... show more Date: 20/May/2026:01:25:23.191678 +0300 \| Reported IP: 104.164.173.64 mod_security \| id: 920350 930130 949110 \| US/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 findlab	2026-05-17 11:15:01 (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-15 02:29:49 (3 months ago)	Try to access /https%3A/vanhoutenjacobi.nl/xmlrpc.php	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 188.255.140.163

🇺🇸 2400:cb00:119:1000:2e99:b569:2309:d36d

🇰🇷 221.152.56.13

🇺🇸 207.90.244.4

🇻🇪 190.97.239.184

🇨🇳 180.184.97.101

🇷🇺 178.155.28.249

🇺🇸 172.217.107.150

🇭🇰 152.32.188.207

🇿🇦 102.253.39.1

🇺🇸 65.49.1.222

🇧🇷 45.185.72.155

🇧🇷 45.181.100.137

🇦🇷 45.180.61.244

🇺🇸 40.124.173.234

🇨🇳 27.155.120.135

🇺🇸 18.218.118.203

🇬🇧 5.226.140.15

🇨🇿 2a02:8308:14:6900:cc75:ad68:9be4:3ff1

🇺🇸 2607:f8b0:4001:c10::122