JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.8.96.85

204.8.96.85 was found in our database!

This IP was reported 209 times. Confidence of Abuse is 74%: ?

74%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Quintex Alliance Consulting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62744
Hostname(s)	tor36.quintex.com
Domain Name	quintex.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.8.96.85

Whois 204.8.96.85

IP Abuse Reports for 204.8.96.85:

This IP address has been reported a total of 209 times from 64 distinct sources. 204.8.96.85 was first reported on April 15th 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 antlac1	2026-07-25 04:55:38 (6 hours ago)	crowdsecurity/http-bad-user-agent	Brute-Force Web App Attack
🇮🇩 securejdprop	2026-07-24 05:01:58 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 78). show less	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-07-24 04:23:36 (1 day ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇸🇬 securejdprop	2026-07-24 03:45:42 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 81). show less	Hacking Web App Attack
🇹🇷 muratkaya665	2026-07-22 13:55:13 (2 days ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: ThinkPHP.Controller.Param ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: ThinkPHP.Controller.Parameter.Remote.Code.Execution. Dest Port: 80. Service: HTTP. Message: web_app3: ThinkPHP.Controller.Parameter.Remote.Code.Execution. show less	Hacking
🇺🇸 TPI-Abuse	2026-07-22 10:53:40 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 204.8.96.85 (tor36.quintex.com): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 204.8.96.85 (tor36.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 06:53:33.391380 2026] [security2:error] [pid 843684:tid 843684] [client 204.8.96.85:58094] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|musicwithsteve.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "musicwithsteve.com"] [uri "/mailto:[email protected]"] [unique_id "amChLar9Q0WGTIYcKtjIuAAAABA"], referer: http://musicwithsteve.com/mailto:[email protected] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇹 Subnet Shadow Specter	2026-07-22 08:38:07 (3 days ago)	[CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (T ... show more [CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (Tor Exit Node). [Method]: => GET. [Request]: / [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36. [OS]: Apple. [IP Address]: 204.8.96.85. [IoA Datetime]: 2026-07-22 05:28:55 UTC +1. show less	Bad Web Bot Hacking Open Proxy Spoofing Web App Attack
🇮🇩 securejdprop	2026-07-22 06:01:48 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 78). show less	Hacking Web App Attack
🇵🇹 Subnet Shadow Specter	2026-07-22 04:28:50 (3 days ago)	[CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (T ... show more [CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (Tor Exit Node). [Method]: => GET. [Request]: / [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 [OS]: Unknown. [IP Address]: 204.8.96.85. [IoA Datetime]: 2026-07-22 05:28:49 UTC +1. show less	Open Proxy Port Scan Hacking Spoofing Bad Web Bot Exploited Host Web App Attack
🇸🇬 securejdprop	2026-07-22 02:58:41 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 81). show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 18:24:44 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 204.8.96.85 (tor36.quintex.com): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 204.8.96.85 (tor36.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 14:24:37.444832 2026] [security2:error] [pid 261285:tid 261285] [client 204.8.96.85:43602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lakependoreillemobility.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lakependoreillemobility.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al-5ZZdL-9fElh7zNhKLNQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 18:20:06 (3 days ago)	IP banned by Fail2Ban in jail wordpress	Web App Attack Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-07-21 11:39:59 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇩 securejdprop	2026-07-20 20:00:52 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 78). show less	Hacking Web App Attack
🇺🇸 oncord	2026-07-19 21:42:58 (5 days ago)	Form spam	Web Spam

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.17.113.148

🇰🇷 211.114.81.212

🇧🇬 79.110.114.233

🇮🇳 35.207.202.141

🇧🇷 200.181.139.120

🇳🇱 172.94.9.51

🇩🇪 169.150.201.19

🇮🇳 157.48.241.146

🇺🇸 147.185.132.41

🇱🇹 77.90.185.100

🇩🇪 57.129.15.177

🇬🇧 35.203.210.83

🇳🇱 217.22.16.134

🇬🇧 193.176.29.10

🇧🇷 179.224.19.201

🇵🇱 176.53.159.197

🇺🇸 172.71.155.17

🇺🇸 139.144.235.132

🇷🇴 92.118.39.14

🇺🇸 75.112.23.30