JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.173

104.207.53.173 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.173

Whois 104.207.53.173

IP Abuse Reports for 104.207.53.173:

This IP address has been reported a total of 130 times from 20 distinct sources. 104.207.53.173 was first reported on June 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-25 05:29:40 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-29.104.207.53.173.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-29.104.207.53.173.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇧🇪 madeit	2025-11-30 04:33:07 (6 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:10:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:10:47.605595 2025] [security2:error] [pid 3531:tid 3531] [client 104.207.53.173:35737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.player-care.us"] [uri "/.svn/wc.db"] [unique_id "aSaZ598iYFgvSQxQhlDmUAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:58:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:58:42.117723 2025] [security2:error] [pid 4304:tid 4304] [client 104.207.53.173:50821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.3wf.com"] [uri "/.git/HEAD"] [unique_id "aSZQwpjm4TZ1Fuz7ltuW2QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-25 23:13:04 (6 months ago)	Probing to gain illegal access	Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 22:59:26 (6 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇩🇪 Holger	2025-11-25 12:08:37 (6 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
Anonymous	2025-11-25 05:10:01 (6 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:48:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:47:50.491365 2025] [security2:error] [pid 688967:tid 688967] [client 104.207.53.173:59909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkcodedesign.com"] [uri "/.svn/wc.db"] [unique_id "aSUY1vA9caVSp9OYftj1XwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:27:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:26:59.000557 2025] [security2:error] [pid 12785:tid 12785] [client 104.207.53.173:52793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.banjogram.com"] [uri "/.env"] [unique_id "aSQW0vNH88uxzPvm5PtdLQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:38:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:38:44.540754 2025] [security2:error] [pid 8942:tid 8942] [client 104.207.53.173:13279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.aviil.com"] [uri "/.env"] [unique_id "aSQLhCAreUnwE6RkrQBujgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:44:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:44:49.140111 2025] [security2:error] [pid 1395:tid 1395] [client 104.207.53.173:53735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.boatregistrationdelaware.com"] [uri "/.git/HEAD"] [unique_id "aSPiwfGCgzSFMzjXrAenhgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 04:16:16 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.53.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 23:16:13.286209 2025] [security2:error] [pid 5751:tid 5751] [client 104.207.53.173:44509] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.binglawoffice.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.binglawoffice.com"] [uri "/s3cmd.ini"] [unique_id "aRFnDWsGq-mMHx0ACCf6wwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a02:4780:3f:1898:0:1291:f7fc:1

🇧🇷 191.5.31.61

🇮🇶 185.166.25.150

🇺🇸 162.217.163.141

🇺🇸 162.216.149.61

🇫🇷 151.80.77.244

🇫🇮 147.185.133.77

🇺🇸 91.230.168.13

🇳🇱 52.232.19.79

🇧🇷 2a02:4780:13:1648:0:17e0:878e:1

🇺🇸 206.223.228.197

🇸🇻 190.150.187.17

🇺🇸 162.216.149.239

🇺🇸 147.185.132.54

🇰🇷 112.216.129.27

🇫🇷 91.196.152.30

🇫🇷 91.196.152.26

🇰🇷 1.214.42.172

🇺🇸 216.25.89.79

🇵🇱 194.180.48.31