JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.184.169

172.104.184.169 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 100%: ?

100%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-184-169.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.184.169

Whois 172.104.184.169

IP Abuse Reports for 172.104.184.169:

This IP address has been reported a total of 125 times from 46 distinct sources. 172.104.184.169 was first reported on June 6th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-23 11:39:38 (4 days ago)	Web vulnerability probing: /.vscode/ftp-sync.json	Web App Attack
Anonymous	2026-06-23 11:25:17 (4 days ago)	(caddyscan) Scanner path probe from 172.104.184.169 (SG/Singapore/172-104-184-169.ip.linodeuserconte ... show more (caddyscan) Scanner path probe from 172.104.184.169 (SG/Singapore/172-104-184-169.ip.linodeusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.104.184.169 - - [23/Jun/2026:11:25:03 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 172.104.184.169 - - [23/Jun/2026:11:25:04 +0000] "GET /.vscode/ftp-config.json HTTP/1.1" [REDACTED] 200 2627 172.104.184.169 - - [23/Jun/2026:11:25:05 +0000] "GET /.vscode/ftp-sync.json HTTP/1.1" [REDACTED] 200 2627 172.104.184.169 - - [23/Jun/2026:11:25:13 +0000] "GET /.vscode/sftp.json HTTP/1.1" [REDACTED] 200 2627 172.104.184.169 - - [23/Jun/2026:11:25:14 +0000] "GET /.vscode/ftp-config.json HTTP/1.1" show less	Port Scan
🇨🇭 4server	2026-06-22 21:22:46 (4 days ago)	[MonJun2223:22:39.5436202026][security2:error][pid2894232:tid2894235][client172.104.184.169:0]ModSec ... show more [MonJun2223:22:39.5436202026][security2:error][pid2894232:tid2894235][client172.104.184.169:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ristrutturazione-case.ch\"][uri\"/sftp-config.json\"][unique_id\"ajmnnyS8JwtJe-cSKU7rJgAAAME\"] show less	Hacking Web App Attack
🇩🇪 todix	2026-06-22 14:57:50 (5 days ago)	WebAttack or semilar from 172.104.184.169	Web App Attack
🇬🇧 consul.to	2026-06-22 07:41:28 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-06-22 03:34:51 (5 days ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
Anonymous	2026-06-22 02:35:09 (5 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇨🇿 sajmon0011	2026-06-21 23:42:12 (5 days ago)	172.104.184.169 - - [22/Jun/2026:01:42:11 +0200] "GET /sftp-config.json HTTP/1.1" 404 196 "-" "Mozil ... show more 172.104.184.169 - - [22/Jun/2026:01:42:11 +0200] "GET /sftp-config.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-21 21:19:56 (5 days ago)	Restricted File Access Attempt. Matched phrase ".vscode" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇩🇪 paissangroup	2026-06-21 15:14:44 (5 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 sdos.es	2026-06-21 10:36:26 (6 days ago)	"Restricted File Access Attempt - Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sf ... show more "Restricted File Access Attempt - Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json" show less	Web App Attack
🇩🇪 4server	2026-06-21 06:24:17 (6 days ago)	[SunJun2108:24:12.6170482026][security2:error][pid3841204:tid3841221][client172.104.184.169:0]ModSec ... show more [SunJun2108:24:12.6170482026][security2:error][pid3841204:tid3841221][client172.104.184.169:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"risanamento-funghi-muffa.ch\"][uri\"/sftp-config.json\"][unique_id\"ajeDjFI6YJmhdC0o50vBuQAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-21 01:53:44 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 bazter.pro	2026-06-21 00:05:55 (6 days ago)	Auto-Ban [2026-06-21 03:05:55]: CRITICAL: Exploit trap paths (1); DC: Linode [Paths: 9] \| Details: E ... show more Auto-Ban [2026-06-21 03:05:55]: CRITICAL: Exploit trap paths (1); DC: Linode [Paths: 9] \| Details: Exploit trap paths: /.vscode/sftp.json \| Sensitive files/paths: /sftp-config.json, /.vscode/sftp.json, /.vscode/ftp-config.json, /.vscode/ftp-sync.json, /.sftp-config.json \| 404 errors (9): /.vscode/sftp.json, /.ftp-sync.json, /.sftp-config.json, /.vscode/ftp-sync.json, /ftp-sync.json, /.ftp-config.json, /ftp-config.json, /sftp-config.json, /.vscode/ftp-config.json show less	Web App Attack Hacking
🇩🇪 Viveronese	2026-06-20 13:30:19 (1 week ago)	HTTP vulnerability scanning	Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 57.141.20.51

🇳🇱 45.156.128.73

🇮🇳 2409:40e4:11f4:bca6:8c7c:3558:4487:5e9d

🇨🇳 218.64.60.34

🇲🇽 187.192.86.153

🇺🇸 162.216.149.18

🇺🇸 155.254.17.105

🇺🇸 103.225.87.7

🇺🇸 74.235.188.96

🇳🇱 45.198.224.145

🇻🇳 27.66.120.129

🇰🇷 220.84.137.99

🇪🇹 213.55.79.195

🇿🇼 197.221.232.44

🇳🇱 195.178.110.217

🇺🇸 162.216.149.175

🇨🇳 110.249.201.179

🇳🇬 102.88.137.213

🇸🇪 213.67.210.12

🇮🇷 185.255.211.133