JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.23

104.207.53.23 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.23

Whois 104.207.53.23

IP Abuse Reports for 104.207.53.23:

This IP address has been reported a total of 80 times from 14 distinct sources. 104.207.53.23 was first reported on June 5th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-05-13 11:23:38 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.53.23 (GB/United Kingdom/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.53.23 (GB/United Kingdom/-): 1 in the last 3600 secs show less	Web App Attack
🇫🇮 as211431.net	2026-04-14 04:46:31 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /index.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-03-26 19:52:04 (2 months ago)	Forum/form spam	Web Spam
🇳🇱 i-turnradio.nl	2025-11-27 01:32:43 (6 months ago)	2025-11-27 @ 02:32:42 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:51:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:51:16.633017 2025] [security2:error] [pid 7420:tid 7420] [client 104.207.53.23:22935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "extreme-atv.com"] [uri "/.svn/wc.db"] [unique_id "aSVR5LZJgDA6j-YxV45-xwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:23:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:23:30.285878 2025] [security2:error] [pid 1740:tid 1740] [client 104.207.53.23:54543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mosheimlib.org"] [uri "/.env"] [unique_id "aSU9Ur3qKzcrU3CX-rM1WgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:37:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:21.634819 2025] [security2:error] [pid 5386:tid 5386] [client 104.207.53.23:32327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tijuana-bibles.com"] [uri "/.svn/wc.db"] [unique_id "aSQZQbZPonhfGmCpjtyAIwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:30:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:30:21.961125 2025] [security2:error] [pid 15585:tid 15585] [client 104.207.53.23:19725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.talkingmess.com"] [uri "/.git/HEAD"] [unique_id "aSP7fWR8Kzm3fMF5bWUZkgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:31:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:31:09.985815 2025] [security2:error] [pid 3832:tid 3832] [client 104.207.53.23:52173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.oxfordgliding.com"] [uri "/.svn/wc.db"] [unique_id "aSPfja8Om0FrVjKpjwroQwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:58:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:58:40.926802 2025] [security2:error] [pid 22068:tid 22068] [client 104.207.53.23:24797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.anniesherbals.com"] [uri "/.svn/wc.db"] [unique_id "aSPX8Faor7H3miqnThczugAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-25 01:47:21 (7 months ago)	attempts to hack passwords	Brute-Force Web App Attack
🇬🇧 Steve	2025-10-14 15:02:58 (8 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
Anonymous	2025-04-07 13:29:44 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 18:20:12 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 08:34:07 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.166.42.207

🇸🇬 174.138.17.143

🇺🇸 172.210.9.231

🇫🇮 147.185.133.127

🇹🇷 141.11.109.45

🇳🇱 91.92.40.233

🇺🇸 52.167.144.141

🇨🇳 222.212.83.51

🇨🇳 220.167.232.168

🇦🇺 209.38.19.30

🇺🇸 162.216.149.34

🇧🇪 34.53.248.117

🇺🇸 195.184.76.89

🇦🇺 170.64.199.221

🇭🇰 144.48.243.18

🇷🇴 80.94.92.171

🇺🇸 44.215.197.235

🇳🇱 192.253.248.65

🇹🇷 176.41.224.9

🇺🇸 172.253.91.145