JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.53.3.97

106.53.3.97 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.53.3.97

Whois 106.53.3.97

IP Abuse Reports for 106.53.3.97:

This IP address has been reported a total of 126 times from 66 distinct sources. 106.53.3.97 was first reported on February 5th 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2024-02-22 01:00:08 (2 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 QUADEMU Abuse Dpt	2024-02-21 21:48:06 (2 years ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Exploited Host
🇫🇷 Mölkky	2024-02-21 18:21:18 (2 years ago)	Vulnerability Scanners: phpMyAdmin.Setup, Online.Setup	Web App Attack
🇨🇦 legitssl	2024-02-21 06:47:27 (2 years ago)	106.53.3.97 - - [21/Feb/2024:01:47:25 -0500] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.p ... show more 106.53.3.97 - - [21/Feb/2024:01:47:25 -0500] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 106.53.3.97 - - [21/Feb/2024:01:47:25 -0500] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 106.53.3.97 - - [21/Feb/2024:01:47:25 -0500] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 106.53.3.97 - - [21/Feb/2024:01:47:25 -0500] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 106.53.3.97 - - [21/Feb/2024:01:47:25 -0500] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 MPL	2024-02-21 03:35:10 (2 years ago)	tcp port scan (10 or more attempts)	Port Scan
🇺🇸 RAP	2024-02-20 20:50:44 (2 years ago)	2024-02-20 20:50:44 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 RAP	2024-02-20 18:35:48 (2 years ago)	2024-02-20 18:35:48 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇺🇸 Block_Steady_Crew	2024-02-20 18:15:10 (2 years ago)	Honeypot snared from 106.53.3.97	Port Scan Web App Attack
🇺🇸 RAP	2024-02-20 13:42:57 (2 years ago)	2024-02-20 13:42:57 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇩🇪 Heathrxw	2024-02-20 09:09:11 (2 years ago)	106.53.3.97 - - [20/Feb/2024:10:09:10 +0100] "GET http://116.202.210.177:80/phpmyadmin/scripts/setup ... show more 106.53.3.97 - - [20/Feb/2024:10:09:10 +0100] "GET http://116.202.210.177:80/phpmyadmin/scripts/setup.php HTTP/1.0" 404 146 "-" "-" ... show less	Port Scan Bad Web Bot
🇩🇪 Linux-Tech	2024-02-20 07:13:01 (2 years ago)	Feb 20 08:12:56 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08 ... show more Feb 20 08:12:56 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=106.53.3.97 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=16823 DF PROTO=TCP SPT=45582 DPT=8000 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 20 08:12:57 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=106.53.3.97 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=37780 DF PROTO=TCP SPT=41770 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 20 08:12:58 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=106.53.3.97 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=37781 DF PROTO=TCP SPT=41770 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 20 08:12:59 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=106.53.3.97 DST=173.212.244.83 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=56180 DF PROTO=TCP SPT=48714 DPT=8081 WINDOW=64240 RES=0x00 SYN URGP=0 Feb 20 08:13:00 ... show less	Port Scan Hacking
🇩🇪 ghostwarriors	2024-02-20 05:50:02 (2 years ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2024-02-20 05:20:40 (2 years ago)	DIS: Web Attack GET http://116.202.216.122:80/phpmyadmin/scripts/setup.php	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 Honeypot-EU-Fru	2024-02-19 07:59:58 (2 years ago)	106.53.3.97 - - [19/Feb/2024:08:59:56 +0100] "GET http://[redacted]:80/phpMyAdmin/scripts/setup.php ... show more 106.53.3.97 - - [19/Feb/2024:08:59:56 +0100] "GET http://[redacted]:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 404 153 "-" "-" 106.53.3.97 - - [19/Feb/2024:08:59:56 +0100] "GET http://[redacted]: ... show less	Bad Web Bot Web App Attack
🇩🇪 vps01.feasoftware.it	2024-02-19 02:32:29 (2 years ago)	106.53.3.97 - - [19/Feb/2024:03:32:24 +0100] "GET http://128.140.89.96:80/phpMyAdmin/scripts/setup.p ... show more 106.53.3.97 - - [19/Feb/2024:03:32:24 +0100] "GET http://128.140.89.96:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 404 196 "-" "-" 106.53.3.97 - - [19/Feb/2024:03:32:25 +0100] "GET http://128.140.89.96:80/phpmyadmin/scripts/setup.php HTTP/1.0" 404 196 "-" "-" 106.53.3.97 - - [19/Feb/2024:03:32:26 +0100] "GET http://128.140.89.96:80/phpMyAdmin-2.11.4/scripts/setup.php HTTP/1.0" 404 196 "-" "-" 106.53.3.97 - - [19/Feb/2024:03:32:26 +0100] "GET http://128.140.89.96:80/phpMyAdmin-2.11.3/scripts/setup.php HTTP/1.0" 404 196 "-" "-" 106.53.3.97 - - [19/Feb/2024:03:32:27 +0100] "GET http://128.140.89.96:80/phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0" 404 196 "-" "-" 106.53.3.97 - - [19/Feb/2024:03:32:27 +0100] "GET http://128.140.89.96:80/phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0" 404 196 "-" "-" 106.53.3.97 - - [19/Feb/2024:03:32:28 +0100] "GET http://128.140.89.96:80/phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.0" 404 196 "-" "-" ... show less	Bad Web Bot

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.188.193.19

🇺🇸 192.6.121.28

🇳🇱 188.166.108.21

🇷🇺 185.23.34.93

🇺🇸 162.216.150.237

🇮🇳 117.254.119.147

🇮🇳 103.30.81.46

🇫🇷 85.217.140.46

🇩🇪 69.5.169.161

🇺🇸 64.23.243.27

🇳🇱 46.151.178.11

🇵🇰 39.51.107.56

🇺🇸 34.23.249.244

🇫🇷 2001:41d0:20a:900::265e

🇺🇸 204.217.129.155

🇻🇪 201.208.212.220

🇪🇨 191.99.19.72

🇨🇳 111.229.82.148

🇧🇪 104.155.1.151

🇬🇧 81.19.219.199