JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.90

104.207.53.90 was found in our database!

This IP was reported 142 times. Confidence of Abuse is 49%: ?

49%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.90

Whois 104.207.53.90

IP Abuse Reports for 104.207.53.90:

This IP address has been reported a total of 142 times from 23 distinct sources. 104.207.53.90 was first reported on June 5th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-06 01:43:35 (3 days ago)	[MonJul0603:43:31.1809022026][security2:error][pid3576801:tid3576854][client104.207.53.90:0]ModSecur ... show more [MonJul0603:43:31.1809022026][security2:error][pid3576801:tid3576854][client104.207.53.90:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"nuovodominio.sito-online.ch\"][uri\"/.git/index\"][unique_id\"aksIQ4wKjSyWNQKAFy4wRgAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 iNetWorker	2026-07-05 17:40:00 (3 days ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇮 inlink.ltd	2026-07-04 08:34:25 (5 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 XICTRON	2026-06-26 09:25:03 (1 week ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-18 21:59:06 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-06-18	Web App Attack SSH Hacking
🇦🇺 paulshipley.com.au	2026-06-18 07:36:04 (3 weeks ago)	[Thu Jun 18 17:36:04.149489 2026] [security2:error] [pid 491617] [client 104.207.53.90:23555] [clien ... show more [Thu Jun 18 17:36:04.149489 2026] [security2:error] [pid 491617] [client 104.207.53.90:23555] [client 104.207.53.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/.git/config"] [unique_id "ajOf5G1Xq6KRvF0l8PG41wAAAAU"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 06:16:25 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 02:16:21.379223 2026] [security2:error] [pid 10853:tid 10853] [client 104.207.53.90:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shubil.com"] [uri "/.git/config"] [unique_id "ajONNXSyXmgsRqAEUwkorgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-18 05:53:01 (3 weeks ago)	[ThuJun1807:52:56.4567962026][security2:error][pid632459:tid632721][client104.207.53.90:0]ModSecurit ... show more [ThuJun1807:52:56.4567962026][security2:error][pid632459:tid632721][client104.207.53.90:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"rssolution.ch\"][uri\"/.git/config\"][unique_id\"ajOHuKtNlA6PcxjA2_KW6QAAAIs\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 05:25:46 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:25:40.751005 2026] [security2:error] [pid 3195:tid 3195] [client 104.207.53.90:39665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbikinis.com"] [uri "/.git/config"] [unique_id "ajOBVGcDtASDu160svLeMAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-18 03:07:02 (3 weeks ago)	Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice02,wa01,wa02]	Hacking SQL Injection Web App Attack
🇺🇸 mnsf	2026-06-18 03:05:42 (3 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
Anonymous	2026-06-18 03:05:01 (3 weeks ago)	suspicious request in access.log	Web App Attack
🇺🇸 mnsf	2026-06-18 01:12:51 (3 weeks ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇺🇸 WizardsToolkit	2026-03-21 05:54:03 (3 months ago)	tried to access forbidden files; attempted to access /wtk/contactUs.php	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 05:55:19 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:55:08.475440 2026] [security2:error] [pid 29465:tid 29465] [client 104.207.53.90:39149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kofcasamblea442.org"] [uri "/wp/.git/config"] [unique_id "aYrIPJg0O1NBnkpQTv4gTwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.64.60.170

🇧🇪 172.217.41.211

🇬🇧 35.203.210.13

🇺🇸 20.15.164.68

🇮🇳 2409:40d4:310b:2d30:c857:4d5a:824d:f908

🇺🇸 216.73.161.157

🇨🇦 192.53.123.118

🇧🇷 187.87.247.94

🇰🇷 183.106.80.208

🇨🇴 181.204.212.90

🇬🇧 74.114.29.157

🇺🇸 45.8.19.158

🇮🇳 35.207.202.141

🇺🇸 2a04:4e40:4440:0:19c:5e5:1e98:e5dd

🇨🇳 220.205.123.19

🇨🇳 116.139.240.197

🇨🇳 111.160.133.62

🇵🇰 103.105.208.213

🇺🇸 66.132.195.79

🇫🇷 51.38.226.110