JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.55.33

172.104.55.33 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-55-33.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.55.33

Whois 172.104.55.33

IP Abuse Reports for 172.104.55.33:

This IP address has been reported a total of 45 times from 21 distinct sources. 172.104.55.33 was first reported on August 3rd 2022, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-24 11:21:25 (13 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 09:48:51 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 172.104.55.33 (172-104-55-33.ip.linodeuserconte ... show more (mod_security) mod_security (id:210492) triggered by 172.104.55.33 (172-104-55-33.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:48:47.565264 2026] [security2:error] [pid 2449538:tid 2449538] [client 172.104.55.33:49295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastbrooktech.com"] [uri "/sftp-config.json"] [unique_id "amM0_2kDx7Aj0ekPrzQuyQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-24 04:56:32 (20 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-07-24 04:46:14 (20 hours ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
Anonymous	2026-07-24 03:37:03 (21 hours ago)	Bot / scanning and/or hacking attempts: GET /.vscode/sftp.json HTTP/1.1, GET /.ftp-sync.json HTTP/1. ... show more Bot / scanning and/or hacking attempts: GET /.vscode/sftp.json HTTP/1.1, GET /.ftp-sync.json HTTP/1.1, GET /.vscode/ftp-sync.json HTTP/1.1, GET /.sftp-config.json HTTP/1.1, GET /sftp-config.json HTTP/1.1, GET /ftp-sync.json HTTP/1.1, GET /.vscode/ftp-config.json HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 masterguru	2026-07-24 03:07:00 (21 hours ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇫🇷 Lunix	2026-07-24 00:26:20 (1 day ago)		Brute-Force Web App Attack
🇦🇺 Bay13	2026-07-23 21:57:02 (1 day ago)	CrowdSec:custom/modsecurity	Web App Attack
Anonymous	2026-07-23 20:30:26 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
Anonymous	2026-07-23 18:46:00 (1 day ago)	*ASN+GEO Blacklisted [No Regrets!]	Port Scan Brute-Force Bad Web Bot Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-23 07:06:20 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.104.55.33 (172-104-55-33.ip.linodeuserconte ... show more (mod_security) mod_security (id:210492) triggered by 172.104.55.33 (172-104-55-33.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 03:06:12.828782 2026] [security2:error] [pid 1903389:tid 1903389] [client 172.104.55.33:50132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drstiso.com"] [uri "/sftp-config.json"] [unique_id "amG9ZPPapudIoG83DTJDkAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-23 04:08:19 (1 day ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-07-23 03:30:45 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-07-23 02:49:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 172.104.55.33 (172-104-55-33.ip.linodeuserconte ... show more (mod_security) mod_security (id:210492) triggered by 172.104.55.33 (172-104-55-33.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 22:49:19.232778 2026] [security2:error] [pid 1396885:tid 1396885] [client 172.104.55.33:56971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "domainbydomain.com"] [uri "/sftp-config.json"] [unique_id "amGBL6TKJIgNvWYfJOLQEgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-07-22 23:13:56 (2 days ago)	cloudlinux2 fail2ban: 2026-07-23 01:09:14,562 fail2ban.filter [1589]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-23 01:09:14,562 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 172.104.55.33 - 2026-07-23 01:09:14cloudlinux2 fail2ban: 2026-07-23 01:09:29,690 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 188.213.202.78 - 2026-07-23 01:09:28cloudlinux2 fail2ban: 2026-07-23 01:10:50,488 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 104.28.227.192 - 2026-07-23 01:10:50cloudlinux2 fail2ban: 2026-07-23 01:10:51,474 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Ban 104.28.227.192cloudlinux2 fail2ban: 2026-07-23 01:10:51,481 fail2ban.filter [1589]: INFO [recidive] Found 104.28.227.192 - 2026-07-23 01:10:51cloudlinux2 fail2ban: 2026-07-23 01:10:51,283 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 104.28.227.192 - 2026-07-23 01:10:51cloudlinux2 fail2ban: 2026-07-23 01:10:51,294 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 104.28.227.192 - 2026-07-23 01:10:51cloudlinux2 fail2ban: 20 show less	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇳🇱 173.194.169.93

🇺🇸 162.216.150.159

🇮🇳 103.207.9.246

🇻🇳 103.9.204.84

🇰🇪 102.210.148.92

🇫🇷 85.217.140.31

🇪🇨 45.70.201.140

🇬🇧 157.245.47.175

🇹🇭 113.53.84.20

🇦🇱 109.236.44.131

🇹🇭 101.51.175.106

🇫🇷 91.196.152.189

🇺🇸 52.165.196.84

🇰🇿 46.8.252.243

🇧🇷 45.181.134.195

🇺🇸 20.98.128.122

🇯🇵 8.211.152.146

🇨🇳 218.13.26.42

🇺🇸 205.210.31.92