JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.97.53

104.234.97.53 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	20 Point Networks LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	20point.net
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.97.53

Whois 104.234.97.53

IP Abuse Reports for 104.234.97.53:

This IP address has been reported a total of 9 times from 9 distinct sources. 104.234.97.53 was first reported on January 26th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-01-31 20:44:02 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.234.97.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.97.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 31 15:43:47.697876 2025] [security2:error] [pid 6865:tid 6886] [client 104.234.97.53:35683] [client 104.234.97.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.79"] [uri "/.env_sample"] [unique_id "Z502Aw5WvADDkL9_Nt0BZwAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 nfsec.pl	2025-01-29 12:44:57 (1 year ago)	104.234.97.53 - - [29/Jan/2025:13:35:08 +0100] "GET /.env.old HTTP/1.1" 403 413 "-" "Mozilla/5.0 (Wi ... show more 104.234.97.53 - - [29/Jan/2025:13:35:08 +0100] "GET /.env.old HTTP/1.1" 403 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.234.97.53 - - [29/Jan/2025:13:35:11 +0100] "GET /credentials/config.json HTTP/1.1" 404 30803 "http://nfsec.pl/credentials/config.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.234.97.53 - - [29/Jan/2025:13:35:15 +0100] "GET /pinfo.php HTTP/1.1" 404 30738 "http://nfsec.pl/pinfo.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.234.97.53 - - [29/Jan/2025:13:44:56 +0100] "GET /.env.www HTTP/1.1" 403 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 104.234.97.53 - - [29/Jan/2025:13:44:56 +0100] "GET /.env.production HTTP/1.1" 403 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win6 ... show less	Exploited Host Web App Attack
Anonymous	2025-01-29 07:02:16 (1 year ago)	Web attack	Bad Web Bot Web App Attack
🇮🇹 Rosh	2025-01-28 11:27:10 (1 year ago)	[01/28/25 12:27:10] 1 attack: /i.php (severity 4);	Web App Attack
🇨🇿 Milky	2025-01-28 05:50:33 (1 year ago)	6× attempts to log on to WP. However, we do not use WP. Last visit 2025-01-27 21:19:05	Web Spam Bad Web Bot Web App Attack
🇳🇱 exxos	2025-01-27 18:32:50 (1 year ago)	web exploit attacks	Web App Attack
🇫🇮 Mr-Money	2025-01-27 05:23:08 (1 year ago)	5:14:20104.234.97.53 - - [27/Jan/2025:06:22:09 +0100] "GET /wp-includes/js/jcrop HTTP/1.1" 404 3240 ... show more 5:14:20104.234.97.53 - - [27/Jan/2025:06:22:09 +0100] "GET /wp-includes/js/jcrop HTTP/1.1" 404 3240 "http://www.mr-money.de/wp-includes/js/jcrop" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 5:14:20104.234.97.53 - - [27/Jan/2025:06:22:22 +0100] "GET /wp-includes/Requests/library HTTP/1.1" 404 3241 "http://www.mr-money.de/wp-includes/Requests/library" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 5:14:20104.234.97.53 - - [27/Jan/2025:06:23:07 +0100] "GET /wp-includes/SimplePie/Content HTTP/1.1" 404 3242 "http://www.mr-money.de/wp-includes/SimplePie/Content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 tjs	2025-01-26 23:25:00 (1 year ago)	web attack, SQL injection attempt	Hacking SQL Injection Web App Attack
🇺🇸 TheMadBeaker	2025-01-26 09:38:05 (1 year ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 203.227.62.73

🇧🇷 203.188.168.25

🇧🇩 202.40.190.212

🇹🇼 165.154.14.170

🇯🇵 138.2.38.49

🇰🇷 118.43.196.32

🇫🇷 91.196.152.34

🇲🇾 49.124.153.51

🇧🇷 16.5.0.234

🇩🇪 212.53.216.121

🇬🇧 206.68.81.15

🇧🇷 205.210.31.165

🇺🇸 205.210.31.12

🇺🇸 205.185.119.157

🇰🇭 202.79.29.108

🇺🇸 192.3.150.128

🇹🇼 128.14.239.39

🇨🇳 112.40.7.90

🇫🇷 85.204.70.100

🇺🇸 45.204.119.78