JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.194.53.57

204.194.53.57 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 9%: ?

ISP	Turing Group Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS140869
Domain Name	turingidc.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.194.53.57

Whois 204.194.53.57

IP Abuse Reports for 204.194.53.57:

This IP address has been reported a total of 9 times from 7 distinct sources. 204.194.53.57 was first reported on April 24th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-01 20:01:42 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 204.194.53.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 204.194.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 16:01:37.887658 2026] [security2:error] [pid 1543563:tid 1543563] [client 204.194.53.57:55869] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dhingra.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dhingra.com"] [uri "/1.backup"] [unique_id "am5QoV_8baW9W1K3N6hb-AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 sarrasystems.com	2026-07-24 10:55:00 (1 month ago)		Web App Attack
🇺🇸 mnsf	2026-06-27 05:05:22 (2 months ago)	Too many Status 40X (16)	Brute-Force Web App Attack
Anonymous	2026-06-01 08:01:04 (2 months ago)	Blocked: Reason='Possible SQL injection activity (186/60 min)'; Requests=186	SQL Injection
🇺🇸 TPI-Abuse	2026-05-19 10:21:46 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 204.194.53.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 204.194.53.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 06:21:37.890320 2026] [security2:error] [pid 31564:tid 31564] [client 204.194.53.57:50720] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.blacktvnow.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.blacktvnow.com"] [uri "/"] [unique_id "agw5sRH2LDQw3kUMLw7aFQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-09 05:39:00 (3 months ago)	Multiple attempts. e.g. /checkout.asp?naz=101DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)%7C%7CCHR(99)%7C%7CCH ... show more Multiple attempts. e.g. /checkout.asp?naz=101DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)%7C%7CCHR(99)%7C%7CCHR(99)%2C15)&ver=en show less	SQL Injection
🇨🇭 zynex	2026-05-07 16:08:44 (3 months ago)	URL Probing: /shop/images/artikel/list/174686/0/35rw3w1y6ehj.php	Web App Attack
🇫🇷 mikekarl	2026-04-30 01:50:44 (3 months ago)	SQL INJECTION cancel_card_payment0''XOR(if(now()=sysdate(),sleep(15),0))XOR''Z	SQL Injection
🇺🇸 mnsf	2026-04-24 23:05:33 (4 months ago)	Too many Status 40X (16) Scanning/Probing (63) Request Overload (263)	Brute-Force Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇲 210.14.97.241

🇧🇷 200.201.234.165

🇳🇱 185.2.80.253

🇧🇷 45.226.161.27

🇹🇷 2a07:7580:2222::11

🇨🇱 200.27.142.121

🇧🇷 177.84.241.228

🇧🇩 175.29.175.133

🇺🇸 165.154.206.33

🇺🇸 162.216.149.65

🇺🇸 147.185.132.161

🇵🇾 131.161.252.154

🇭🇺 94.21.177.28

🇺🇸 52.21.227.35

🇸🇬 47.128.18.168

🇩🇪 8.211.9.207

🇩🇪 2a01:4f8:c17:4482::1

🇱🇹 213.176.26.94

🇺🇦 185.38.218.117

🇦🇷 181.12.70.115