JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.6

104.207.53.6 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.6

Whois 104.207.53.6

IP Abuse Reports for 104.207.53.6:

This IP address has been reported a total of 86 times from 18 distinct sources. 104.207.53.6 was first reported on June 4th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-05-06 19:57:31 (4 weeks ago)	649 requests with url.path *.env	Brute-Force Bad Web Bot
🇵🇱 sefinek.net	2025-12-31 01:08:10 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-12-30 01:41:22 (5 months ago)	2025-12-30T03:41:22.381936+02:00 zanati wp(www.sahpa.co.za)[594277]: Blocked authentication attempt ... show more 2025-12-30T03:41:22.381936+02:00 zanati wp(www.sahpa.co.za)[594277]: Blocked authentication attempt for [email protected] from 104.207.53.6 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:55:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:55:20.357783 2025] [security2:error] [pid 22044:tid 22107] [client 104.207.53.6:29559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shieldsenterprisesusa.com"] [uri "/.env"] [unique_id "aVIJuA2dUHoRkDjmH6S_lgAAAYQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:08:38 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:08:30.613231 2025] [security2:error] [pid 23151:tid 23151] [client 104.207.53.6:37407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yubagals.com"] [uri "/.env"] [unique_id "aVH-vpXwLTj9D3ALJ0mSnwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-27 13:07:51 (5 months ago)	2025-12-27T15:07:50.261380+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt ... show more 2025-12-27T15:07:50.261380+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt for [email protected] from 104.207.53.6 ... show less	Web App Attack
Anonymous	2025-12-21 10:49:04 (5 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:51:27 (5 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:59:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:59:41.546759 2025] [security2:error] [pid 790:tid 790] [client 104.207.53.6:38561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ontimelogistiks.com"] [uri "/.svn/wc.db"] [unique_id "aSQefTGpjJydg7mRbN3DwgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:24:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:22:56.951013 2025] [security2:error] [pid 32553:tid 32553] [client 104.207.53.6:49595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.journeytoaclosedcity.com"] [uri "/.env"] [unique_id "aSQH0HvYYPnh7qtMC7jYJwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:24:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:24:51.924872 2025] [security2:error] [pid 30068:tid 30068] [client 104.207.53.6:44921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.doug-riley.net"] [uri "/.svn/wc.db"] [unique_id "aSPsI2H5Za81YxZTSlgE6wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:09:10 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇳🇱 EGP Abuse Dept	2025-10-27 03:19:05 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2025-04-07 03:20:47 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 16:13:24 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 212.56.53.24

🇳🇱 160.119.71.32

🇺🇸 107.141.138.44

🇨🇳 49.64.169.153

🇬🇧 35.203.210.68

🇮🇳 20.219.39.254

🇨🇳 8.140.39.11

🇸🇪 213.66.197.199

🇬🇧 193.163.125.100

🇰🇿 176.64.12.120

🇮🇩 157.15.40.1

🇫🇮 147.185.133.209

🇺🇸 147.185.132.120

🇺🇸 136.109.147.20

🇲🇾 49.124.152.171

🇹🇿 41.59.11.194

🇺🇸 35.245.29.35

🇺🇸 2.25.175.237

🇺🇸 2604:9e00:1:129::2:ba4

🇰🇷 221.162.74.166