JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.203.97

172.104.203.97 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 29%: ?

29%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-203-97.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.203.97

Whois 172.104.203.97

IP Abuse Reports for 172.104.203.97:

This IP address has been reported a total of 49 times from 10 distinct sources. 172.104.203.97 was first reported on June 17th 2023, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-29 12:07:56 (8 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 noise.agency	2026-06-28 23:25:18 (21 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 172.104.203.97 (DE/Germany/172-104-203- ... show more (mod_security) mod_security triggered on hostname [redacted] 172.104.203.97 (DE/Germany/172-104-203-97.ip.linodeusercontent.com) show less	SQL Injection
🇭🇺 bcsaba	2026-06-28 22:21:35 (22 hours ago)	Multiple web server 400 error codes from same source ip. 172.104.203.97 - - [29/Jun/2026:00:18:18 +0 ... show more Multiple web server 400 error codes from same source ip. 172.104.203.97 - - [29/Jun/2026:00:18:18 +0200] "GET /en/our-staff?catid=-9126225%27+ORDER+BY+8+--+-&_=iuq4m58h HTTP/2.0" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack Brute-Force
Anonymous	2026-06-28 14:06:18 (1 day ago)	Blocked: Reason='Possible SQL injection activity (204/60 min)'; Requests=204	SQL Injection
🇩🇪 updown.io	2026-01-02 23:05:54 (5 months ago)	{"level":"info","ts":1767395153.9557514,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1767395153.9557514,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.104.203.97","remote_port":"14910","client_ip":"172.104.203.97","proto":"HTTP/1.1","method":"HEAD","host":"statut.mte.incubateur.net","uri":"/nl/jsp/m.jsp","headers":{"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["en-US;q=0.9,en;q=0.8"],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6723.70 Safari/537.36"],"Connection":["close"],"Content-Length":["20"],"Accept":["/"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"statut.mte.incubateur.net"}},"bytes_read":0,"user_id":"","duration":0.001913973,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1767395153.9561186,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip": ... show less	DDoS Attack Web App Attack
🇧🇪 cmbplf	2026-01-02 09:30:04 (5 months ago)	508 limiting connections by zone (11m59s)	DDoS Attack
🇩🇪 updown.io	2026-01-01 17:02:59 (5 months ago)	{"level":"info","ts":1767286978.6011012,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1767286978.6011012,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.104.203.97","remote_port":"50608","client_ip":"172.104.203.97","proto":"HTTP/1.1","method":"HEAD","host":"status.hiltonvaluedates.com","uri":"/nl/jsp/m.jsp","headers":{"Cookie":["REDACTED"],"Connection":["close"],"Accept":["/"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.6723.70 Safari/537.36"],"Content-Length":["20"],"Accept-Encoding":["gzip, deflate, br"],"Accept-Language":["en-US;q=0.9,en;q=0.8"],"Cache-Control":["max-age=0"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.hiltonvaluedates.com"}},"bytes_read":0,"user_id":"","duration":0.000103629,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}} {"level":"info","ts":1767286978.609635,"logger":"http.log.access.log1","msg":"handled request ... show less	DDoS Attack Web App Attack
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 12:05:35 (3 years ago)	Jun 18 09:04:46 dns1 sshd[2500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 09:04:46 dns1 sshd[2500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 09:04:48 dns1 sshd[2500]: Failed password for root from 172.104.203.97 port 40132 ssh2 Jun 18 09:04:50 dns1 sshd[2500]: Disconnected from authenticating user root 172.104.203.97 port 40132 [preauth] Jun 18 09:05:32 dns1 sshd[2507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 09:05:34 dns1 sshd[2507]: Failed password for root from 172.104.203.97 port 47370 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 11:40:56 (3 years ago)	Jun 18 08:40:07 dns1 sshd[2365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 08:40:07 dns1 sshd[2365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 08:40:09 dns1 sshd[2365]: Failed password for root from 172.104.203.97 port 59196 ssh2 Jun 18 08:40:11 dns1 sshd[2365]: Disconnected from authenticating user root 172.104.203.97 port 59196 [preauth] Jun 18 08:40:53 dns1 sshd[2369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 08:40:55 dns1 sshd[2369]: Failed password for root from 172.104.203.97 port 58526 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 11:16:23 (3 years ago)	Jun 18 08:15:35 dns1 sshd[2120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 08:15:35 dns1 sshd[2120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 08:15:37 dns1 sshd[2120]: Failed password for root from 172.104.203.97 port 59056 ssh2 Jun 18 08:15:38 dns1 sshd[2120]: Disconnected from authenticating user root 172.104.203.97 port 59056 [preauth] Jun 18 08:16:21 dns1 sshd[2123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 08:16:22 dns1 sshd[2123]: Failed password for root from 172.104.203.97 port 59552 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 10:52:03 (3 years ago)	Jun 18 07:51:16 dns1 sshd[1770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 07:51:16 dns1 sshd[1770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 07:51:18 dns1 sshd[1770]: Failed password for root from 172.104.203.97 port 58164 ssh2 Jun 18 07:51:19 dns1 sshd[1770]: Disconnected from authenticating user root 172.104.203.97 port 58164 [preauth] Jun 18 07:52:01 dns1 sshd[1775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 07:52:02 dns1 sshd[1775]: Failed password for root from 172.104.203.97 port 60558 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 10:28:06 (3 years ago)	Jun 18 07:27:18 dns1 sshd[1625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 07:27:18 dns1 sshd[1625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 07:27:20 dns1 sshd[1625]: Failed password for root from 172.104.203.97 port 52718 ssh2 Jun 18 07:27:22 dns1 sshd[1625]: Disconnected from authenticating user root 172.104.203.97 port 52718 [preauth] Jun 18 07:28:03 dns1 sshd[1627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 07:28:05 dns1 sshd[1627]: Failed password for root from 172.104.203.97 port 41836 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 10:04:45 (3 years ago)	Jun 18 07:03:57 dns1 sshd[1501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 07:03:57 dns1 sshd[1501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 07:03:59 dns1 sshd[1501]: Failed password for root from 172.104.203.97 port 53140 ssh2 Jun 18 07:04:00 dns1 sshd[1501]: Disconnected from authenticating user root 172.104.203.97 port 53140 [preauth] Jun 18 07:04:42 dns1 sshd[1503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 07:04:44 dns1 sshd[1503]: Failed password for root from 172.104.203.97 port 57444 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 09:41:27 (3 years ago)	Jun 18 06:40:39 dns1 sshd[1378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 06:40:39 dns1 sshd[1378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 06:40:41 dns1 sshd[1378]: Failed password for root from 172.104.203.97 port 56038 ssh2 Jun 18 06:40:42 dns1 sshd[1378]: Disconnected from authenticating user root 172.104.203.97 port 56038 [preauth] Jun 18 06:41:23 dns1 sshd[1380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 06:41:25 dns1 sshd[1380]: Failed password for root from 172.104.203.97 port 34974 ssh2 show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2023-06-18 09:18:20 (3 years ago)	Jun 18 06:17:32 dns1 sshd[1162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 18 06:17:32 dns1 sshd[1162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 06:17:35 dns1 sshd[1162]: Failed password for root from 172.104.203.97 port 34448 ssh2 Jun 18 06:17:36 dns1 sshd[1162]: Disconnected from authenticating user root 172.104.203.97 port 34448 [preauth] Jun 18 06:18:17 dns1 sshd[1164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.203.97 user=root Jun 18 06:18:19 dns1 sshd[1164]: Failed password for root from 172.104.203.97 port 39300 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 195.154.118.29

🇲🇽 187.230.85.160

🇩🇪 163.53.244.248

🇺🇸 104.236.83.40

🇮🇳 103.207.9.154

🇬🇧 87.236.176.141

🇬🇧 87.236.176.139

🇬🇧 87.236.176.130

🇺🇸 70.165.56.202

🇪🇨 45.224.97.244

🇲🇾 203.121.40.210

🇻🇳 125.235.234.155

🇨🇳 117.132.162.116

🇨🇳 113.250.15.160

🇬🇧 87.236.176.123

🇬🇧 87.236.176.112

🇬🇧 87.236.176.104

🇨🇳 27.222.54.149

🇸🇬 193.37.32.98

🇻🇳 183.91.186.36