104.165.194.130
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- EGIHosting
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS212238
- Domain Name
- egihosting.com
- Country
- ๐บ๐ธ United States of America
- City
- Santa Clara, California
Abuse Reports
Total reports
72 from
58 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ฌ๐ง thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
|
Hacking Brute-Force Bad Web Bot Web App Attack | |
| ๐ณ๐ฑ homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-31.
|
Web App Attack SSH Hacking | |
| ๐ซ๐ฎ โ |สษงฤ ษฦกแฟณ|โ |
[2026-11-01 14:04:33 UTC] Vulnerability/exploit scanning detected from 104.165.194.130 () PATHS: unknown
|
Bad Web Bot Web App Attack | |
| ๐บ๐ธ wbsouza |
CrowdSec: infra/bad-path-probe โ automated firewall drops on self-hosted IDS sensor
|
Hacking | |
| ๐บ๐ธ Charlesiv |
|
Bad Web Bot | |
| ๐ฏ๐ต Aorvia.com |
Suspicious web application attack attempts were detected and blocked by the server security system.
|
Web App Attack | |
| ๐ฌ๐ง thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]
|
Hacking Brute-Force Bad Web Bot Web App Attack | |
| ๐ซ๐ท regishoussin |
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-31 23:25 UTC.
|
Bad Web Bot Web App Attack | |
| ๐ฌ๐ง thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]
|
Hacking Brute-Force Bad Web Bot Web App Attack | |
| ๐ฉ๐ช Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
|
Hacking Brute-Force Web App Attack | |
| ๐ธ๐ช Juha Jurvanen |
Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web attack pattern matched '*/.env*'..
|
Brute-Force | |
| ๐ฉ๐ช shurizma |
[31/Oct/2026:21:48:57 +0000] - - 301 - GET http dontask.dev "/.env" [Client 104.165.194.130] [Length 166] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "-"
...
|
Web App Attack Bad Web Bot | |
| ๐บ๐ธ ambor |
Honeypot access: Environment file access attempt. Path: /.env
|
Web App Attack | |
| ๐ฉ๐ช on-com |
URL scan
|
Brute-Force Web App Attack | |
| ๐ฉ๐ช thesimonmanuel |
104.165.194.130 - - [01/Nov/2026:02:51:11 +0530] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown