JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.8.96.173

204.8.96.173 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 48%: ?

48%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Quintex Alliance Consulting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62744
Hostname(s)	tor84.quintex.com
Domain Name	quintex.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.8.96.173

Whois 204.8.96.173

IP Abuse Reports for 204.8.96.173:

This IP address has been reported a total of 224 times from 74 distinct sources. 204.8.96.173 was first reported on April 15th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2026-07-27 18:51:22 (1 day ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 oncord	2026-07-27 15:51:41 (1 day ago)	Form spam	Web Spam
🇵🇹 Subnet Shadow Specter	2026-07-23 14:40:08 (5 days ago)	[CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (T ... show more [CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (Tor Exit Node). [Method]: => GET. [Request]: / [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 [OS]: Unknown. [IP Address]: 204.8.96.173. [IoA Datetime]: 2026-07-23 15:40:08 UTC +1. show less	Open Proxy Port Scan Hacking Spoofing Bad Web Bot Exploited Host Web App Attack
🇸🇬 securejdprop	2026-07-21 09:07:03 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 78). show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 17:35:32 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 204.8.96.173 (tor84.quintex.com): 1 in the last ... show more (mod_security) mod_security (id:210831) triggered by 204.8.96.173 (tor84.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:35:29.175133 2026] [security2:error] [pid 2526:tid 2542] [client 204.8.96.173:52994] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.vcschief.org\|F\|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.vcschief.org"] [uri "/"] [unique_id "alpn4cKYtmDWzP4zjTpNwgAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-14 08:37:40 (2 weeks ago)	Blocked by UFW (TCP on 50738) Source port: 444 TTL: 54 Packet length: 52 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 50738) Source port: 444 TTL: 54 Packet length: 52 TOS: 0x08 This report (for 204.8.96.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-12 15:22:11 (2 weeks ago)	Blocked by UFW (TCP on 36146) Source port: 445 TTL: 54 Packet length: 612 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 36146) Source port: 445 TTL: 54 Packet length: 612 TOS: 0x08 This report (for 204.8.96.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-11 16:50:47 (2 weeks ago)	Blocked by UFW (TCP on 41554) Source port: 443 TTL: 54 Packet length: 76 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 41554) Source port: 443 TTL: 54 Packet length: 76 TOS: 0x08 This report (for 204.8.96.173) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 anycast_ac	2026-07-08 14:45:18 (2 weeks ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 198 requests on port 443	DDoS Attack Web App Attack
🇫🇷 polido	2026-07-07 13:25:14 (3 weeks ago)	[Oracle] Unauthorized connection attempt to port 443 from 204.8.96.173	Port Scan
Anonymous	2026-07-02 12:01:10 (3 weeks ago)	2026-07-02 04:01:02,959 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.173 2026-07-02 ... show more 2026-07-02 04:01:02,959 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.173 2026-07-02 07:00:30,201 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.173 2026-07-02 10:00:23,317 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.173 2026-07-02 13:00:16,258 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.173 2026-07-02 15:00:58,203 fail2ban.actions [3625835]: NOTICE [tor] Ban 204.8.96.173 show less	Brute-Force
🇺🇸 ipblock.com	2026-02-13 13:33:00 (5 months ago)	IPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 gu-alvareza	2026-02-13 07:05:09 (5 months ago)	Cross.Site.Scripting	Hacking Web App Attack
🇺🇸 octageeks.com	2026-02-08 05:06:18 (5 months ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇫🇷 Nicolmn	2026-02-04 09:40:45 (5 months ago)	Web form spam ( id mmcs.l )	Web Spam

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.216.58.204

🇹🇼 198.235.24.91

🇺🇸 192.155.90.220

🇩🇪 167.94.146.48

🇺🇸 91.230.168.161

🇧🇬 79.124.62.230

🇷🇴 193.32.162.71

🇳🇱 185.93.89.36

🇺🇸 157.230.239.134

🇫🇷 146.70.194.236

🇺🇸 76.35.117.153

🇸🇬 47.84.102.59

🇵🇱 31.61.251.247

🇷🇴 2.57.121.25

🇧🇷 201.20.85.122

🇺🇸 199.87.178.46

🇲🇦 197.153.57.103

🇨🇳 111.33.71.238

🇨🇮 102.210.82.20

🇳🇱 45.148.10.141