JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.2

104.207.53.2 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.2

Whois 104.207.53.2

IP Abuse Reports for 104.207.53.2:

This IP address has been reported a total of 86 times from 24 distinct sources. 104.207.53.2 was first reported on June 21st 2024, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 INTEQ	2026-07-13 13:27:08 (23 hours ago)	Web attack from 104.207.53.2	Web App Attack
🇲🇽 octageeks.com	2026-07-04 04:15:59 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇿 billyborsht	2026-07-04 00:36:59 (1 week ago)	2026-07-04T12:36:58.490055+12:00 southern wordpress(nzangels.com)[2023922]: Authentication attempt f ... show more 2026-07-04T12:36:58.490055+12:00 southern wordpress(nzangels.com)[2023922]: Authentication attempt for unknown user supe1user10 from 104.207.53.2 ... show less	Hacking Web App Attack
🇩🇪 Tha_14	2026-06-30 01:40:35 (2 weeks ago)	Attempt to log in with non-existing username: xadmin	Bad Web Bot
🇭🇺 bcsaba	2026-06-29 13:57:03 (2 weeks ago)	CMS (WordPress or Joomla) login attempt. 104.207.53.2 - - [29/Jun/2026:15:57:00 +0200] "POST /wp-log ... show more CMS (WordPress or Joomla) login attempt. 104.207.53.2 - - [29/Jun/2026:15:57:00 +0200] "POST /wp-login.php HTTP/1.1" 200 3521 "https://REDACTED/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Hacking Brute-Force Web App Attack
🇫🇷 pm33	2026-06-27 09:46:19 (2 weeks ago)	Wordpress login attempts	Brute-Force
🇫🇮 inlink.ltd	2026-05-26 08:41:03 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇷 masterguru	2026-03-26 12:17:52 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.2 (GB/United Kingdom/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.53.2 (GB/United Kingdom/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 www.winos.me	2025-12-30 23:14:16 (6 months ago)	Banned due to high error rate on HTTP/1.1 protocol	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (7 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-12-02 19:29:42 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:29:36.219306 2025] [security2:error] [pid 7486:tid 7486] [client 104.207.53.2:54249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fables4teens.com"] [uri "/.svn/wc.db"] [unique_id "aS8-ILmozOUtmRdXCJNG9AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-02 05:48:46 (7 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇧🇪 madeit	2025-11-30 04:33:08 (7 months ago)		Web App Attack
🇱🇹 NotACaptcha	2025-11-26 20:12:26 (7 months ago)	webserver:80 [26/Nov/2025] "GET /.git/HEAD HTTP/1.1" 302 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win ... show more webserver:80 [26/Nov/2025] "GET /.git/HEAD HTTP/1.1" 302 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:02:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:01:56.851893 2025] [security2:error] [pid 21735:tid 21735] [client 104.207.53.2:35853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bienvenueplantation.cathrynn.com"] [uri "/.git/HEAD"] [unique_id "aSVUZHu-pl2QZUWTPWjkjgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.14.3.125

🇲🇾 49.124.148.206

🇺🇸 174.105.15.219

🇮🇩 163.7.11.126

🇫🇮 147.185.133.193

🇮🇳 122.180.242.27

🇺🇸 66.132.224.24

🇺🇸 66.132.195.89

🇺🇸 52.167.144.213

🇸🇬 47.82.15.73

🇱🇹 45.227.254.170

🇸🇬 34.126.187.196

🇺🇸 34.71.30.159

🇨🇳 27.17.30.150

🇳🇱 5.61.209.43

🇧🇷 170.79.82.112

🇻🇳 165.99.16.135

🇸🇬 159.223.32.146

🇺🇸 154.92.23.249

🇳🇱 91.92.243.20