JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.86.13

172.104.86.13 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-86-13.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.86.13

Whois 172.104.86.13

IP Abuse Reports for 172.104.86.13:

This IP address has been reported a total of 26 times from 22 distinct sources. 172.104.86.13 was first reported on June 23rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-06-26 03:09:33 (2 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 172.104.86.13 - - [23/Jun/2026:06:12:32 -0300] "GET /.e ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 172.104.86.13 - - [23/Jun/2026:06:12:32 -0300] "GET /.env.prod HTTP/1.1" 404 414 - 172.104.86.13 - - [23/Jun/2026:06:12:33 -0300] "GET /.env.development HTTP/1.1" 404 414 - 172.104.86.13 - - [23/Jun/2026:06:12:33 -0300] "GET /wp-config.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 mashamal	2026-06-26 00:34:25 (2 days ago)	Vulnerability Probe ...	Web App Attack
🇮🇪 AutosOnShow	2026-06-25 23:34:06 (2 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-25 23:33:46.571 \|	Web App Attack
🇮🇪 AutosOnShow	2026-06-25 22:38:05 (2 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-25 22:37:23.480 \|	Web App Attack
🇧🇷 Vieira Filho	2026-06-25 19:16:28 (2 days ago)	172.104.86.13 - - [25/Jun/2026:16:16:27 -0300] [35.198.31.82] "35.198.31.82" "GET /settings.py HTTP ... show more 172.104.86.13 - - [25/Jun/2026:16:16:27 -0300] [35.198.31.82] "35.198.31.82" "GET /settings.py HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 172.104.86.13 - - [25/Jun/2026:16:16:27 -0300] [35.198.31.82] "35.198.31.82" "GET /wp-config.php HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 172.104.86.13 - - [25/Jun/2026:16:16:27 -0300] [35.198.31.82] "35.198.31.82" "GET /web.config HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 172.104.86.13 - - [25/Jun/2026:16:16:27 -0300] [35.198.31.82] "35.198.31.82" "GET /Dockerfile HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 172.104.86.13 - - [25/Jun/2026:16:16:27 -0300] ... show less	Brute-Force Web App Attack Exploited Host
Anonymous	2026-06-25 14:53:28 (3 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇻🇳 trung.fun	2026-06-25 12:57:02 (3 days ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇧🇷 Peregrine	2026-06-25 03:09:23 (3 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 172.104.86.13 - - [23/Jun/2026:06:12:32 -0300] "GET /.e ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 172.104.86.13 - - [23/Jun/2026:06:12:32 -0300] "GET /.env.prod HTTP/1.1" 404 414 - 172.104.86.13 - - [23/Jun/2026:06:12:33 -0300] "GET /.env.development HTTP/1.1" 404 414 - 172.104.86.13 - - [23/Jun/2026:06:12:33 -0300] "GET /wp-config.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-06-24 22:27:16 (3 days ago)		Brute-Force Web App Attack
Anonymous	2026-06-24 21:12:28 (3 days ago)	Fail2Ban triggered	Web App Attack
🇩🇪 Viveronese	2026-06-24 20:13:53 (3 days ago)	HTTP vulnerability scanning	Web App Attack
Anonymous	2026-06-24 19:36:59 (3 days ago)	172.104.86.13 - - [24/Jun/2026:21:36:53 +0200] "GET /database.sql HTTP/1.1" 403 177 "-" "Mozilla/5.0 ... show more 172.104.86.13 - - [24/Jun/2026:21:36:53 +0200] "GET /database.sql HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇪 voormedia	2026-06-24 18:40:04 (3 days ago)	Accessed trap at '/.travis.yml'	Web App Attack
🇺🇸 i553041	2026-06-24 17:12:57 (3 days ago)	172.104.86.13 - - [24/Jun/2026:17:12:52 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT ... show more 172.104.86.13 - - [24/Jun/2026:17:12:52 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.104.86.13 - - [24/Jun/2026:17:12:53 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.104.86.13 - - [24/Jun/2026:17:12:53 +0000] "GET /.aws/credentials HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.104.86.13 - - [24/Jun/2026:17:12:53 +0000] "GET /logs HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.104.86.13 - - [24/Jun/2026:17:12:53 +0000] "GET /api/auth HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.104.86.13 - - [24/ ... show less	Brute-Force SSH
🇺🇸 kuroneko_omu	2026-06-24 11:57:34 (4 days ago)	Fail2Ban <webattack> jail detected 5 attempts against 172.104.86.13.	DDoS Attack Hacking Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 8.138.162.61

🇧🇷 207.248.16.207

🇧🇷 207.248.16.206

🇧🇪 194.32.155.45

🇨🇳 182.44.39.49

🇸🇬 165.22.61.123

🇧🇬 108.165.233.160

🇨🇳 106.75.185.227

🇺🇸 67.205.170.89

🇺🇸 66.132.172.130

🇺🇸 66.132.172.110

🇺🇸 54.146.161.8

🇮🇳 2409:40c4:e9:a217:28e0:7eb7:da9:5a5a

🇦🇿 212.47.135.147

🇧🇷 207.248.16.205

🇧🇷 207.248.16.204

🇰🇷 112.216.108.62

🇨🇳 106.13.37.197

🇧🇩 103.171.69.189

🇿🇦 92.4.136.2