JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.186

104.207.53.186 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.186

Whois 104.207.53.186

IP Abuse Reports for 104.207.53.186:

This IP address has been reported a total of 165 times from 22 distinct sources. 104.207.53.186 was first reported on June 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-12 11:16:38 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-07 01:45:49 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:43:56 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 solution.it	2026-04-25 19:54:59 (1 month ago)	[Sat Apr 25 21:54:59.454710 2026] [php7:error] [pid 2498613:tid 2498613] [client 104.207.53.186:1727 ... show more [Sat Apr 25 21:54:59.454710 2026] [php7:error] [pid 2498613:tid 2498613] [client 104.207.53.186:17271] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 solution.it	2026-04-24 00:15:52 (1 month ago)	[Fri Apr 24 02:15:52.502767 2026] [php7:error] [pid 2077931:tid 2077931] [client 104.207.53.186:3048 ... show more [Fri Apr 24 02:15:52.502767 2026] [php7:error] [pid 2077931:tid 2077931] [client 104.207.53.186:30485] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-04-23 13:06:14 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 Lino Project	2026-04-21 04:40:38 (1 month ago)	104.207.53.186 - - [21/Apr/2026:06:40:37 +0200] "POST /xmlrpc.php HTTP/2.0" 403 455 "-" "Mozilla/5.0 ... show more 104.207.53.186 - - [21/Apr/2026:06:40:37 +0200] "POST /xmlrpc.php HTTP/2.0" 403 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-20 16:22:02 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-16 13:44:40 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-13 11:17:46 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.186 (GB/United Kingdom/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 myagent.site	2026-02-09 22:10:50 (3 months ago)	Blocking for trying to access an exploit file: /config/.env	Hacking
🇺🇸 TPI-Abuse	2026-02-09 21:47:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.186 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:47:01.046812 2026] [security2:error] [pid 8253:tid 8253] [client 104.207.53.186:59523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyandthegroove.com"] [uri "/app/.git/config"] [unique_id "aYpV1W2nepwzfiHGDCZ9RgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 18:55:55 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.186 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:55:46.050158 2026] [security2:error] [pid 12332:tid 12332] [client 104.207.53.186:57945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fydelitybags.com"] [uri "/test/.git/config"] [unique_id "aYotsj1hk5v2J2nQ7GDykQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:45:20 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.186 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:45:03.460493 2026] [security2:error] [pid 9614:tid 9614] [client 104.207.53.186:11825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funkerecords.com"] [uri "/.env.local"] [unique_id "aYodH-H3ejVCyYrNeBXZywAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.190.153.166

🇺🇸 172.253.244.155

🇨🇳 121.29.149.95

🇳🇬 102.91.5.18

🇷🇴 80.94.92.177

🇺🇸 69.12.64.44

🇱🇹 45.227.254.170

🇲🇽 186.96.145.241

🇷🇺 95.161.155.170

🇹🇭 1.20.180.9

🇮🇳 2a02:4780:11:1215:0:1ab7:1f6f:1

🇸🇪 217.211.208.125

🇳🇱 185.213.174.141

🇮🇳 103.201.142.219

🇫🇷 90.3.136.99

🇫🇷 86.217.21.47

🇩🇪 69.5.169.175

🇬🇧 37.10.113.219

🇦🇪 20.203.42.204

🇺🇸 20.80.72.204