JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.253.204.166

5.253.204.166

Neutral Activity

70 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

M247 LTD Luxembourg Infrastructure

Usage Type

Data Center/Web Hosting/Transit

ASN

AS9009

Domain Name

m247.com

Country

🇱🇺 Luxembourg

City

Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

5.253.204.166 has been reported 70 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 5.253.204.166:

This IP address has been reported a total of 70 times from 29 distinct sources. 5.253.204.166 was first reported on July 3rd 2024, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-05 05:37:39 (3 months ago)	Blocked by UFW (TCP on 1090) Source port: 65009 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 1090) Source port: 65009 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 5.253.204.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-04 14:09:19 (3 months ago)	Blocked by UFW (TCP on 1090) Source port: 29883 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 1090) Source port: 29883 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 5.253.204.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-04 00:39:39 (3 months ago)	Blocked by UFW (TCP on 1090) Source port: 53754 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 1090) Source port: 53754 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 5.253.204.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-03 11:15:59 (3 months ago)	Blocked by UFW (TCP on 1090) Source port: 12676 TTL: 51 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 1090) Source port: 12676 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 5.253.204.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇺 Agrohim	2026-03-31 21:28:15 (5 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇫🇷 masterguru	2026-03-26 01:54:05 (5 months ago)	(wordpress) Apache: Failed WordPress login from 5.253.204.166 (LU/Luxembourg/-): 10 in the last 3600 ... show more (wordpress) Apache: Failed WordPress login from 5.253.204.166 (LU/Luxembourg/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇵🇱 sefinek.net	2026-03-02 20:48:18 (6 months ago)	Honeypot hit: Unauthorized traffic (68 bytes of payload); 56655 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (68 bytes of payload); 56655 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 TPI-Abuse	2026-01-20 03:09:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 22:09:33.228070 2026] [security2:error] [pid 16300:tid 16300] [client 5.253.204.166:31198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatcakecup.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW7x7XWCRSOjCAeBmlKWywAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-01-20 01:58:31 (7 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 01:26:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 20:26:46.407227 2026] [security2:error] [pid 32558:tid 32558] [client 5.253.204.166:5105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weddingmusicguitar.benshermanguitar.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW7Z1szES23c44jj2mvKQgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 22:27:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 17:27:20.599796 2026] [security2:error] [pid 31216:tid 31216] [client 5.253.204.166:23062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.timetemple.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW6vyI2-B2hRJFngW2tkwwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 22:06:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 5.253.204.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 17:06:51.004608 2026] [security2:error] [pid 3439714:tid 3439714] [client 5.253.204.166:42256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tckgbookkeeping.biz"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aW6q-2GBddF26lrCKAimZQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-01-19 21:35:02 (7 months ago)		Web App Attack
🇫🇷 COMAITE	2026-01-19 21:14:52 (7 months ago)	Suspicious URL access.	Web App Attack
🇺🇸 mnsf	2026-01-19 21:05:13 (7 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 34.40.234.29

🇩🇪 217.154.234.6

🇭🇰 165.154.41.56

🇰🇷 121.125.67.137

🇨🇳 117.74.67.12

🇺🇸 108.244.95.76

🇷🇴 92.118.39.14

🇺🇸 64.202.191.109

🇹🇼 58.115.51.240

🇬🇷 45.92.33.82

🇺🇸 34.16.181.136

🇷🇴 2.57.122.150

🇨🇳 218.58.33.72

🇧🇴 181.115.178.163

🇺🇸 124.198.131.186

🇫🇷 85.95.202.167

🇭🇰 34.96.201.66

🇹🇼 34.80.27.164

🇺🇸 20.65.219.26

🇩🇪 2a03:2880:f177:180:face:b00c:0:4c63