JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 86.103.53.133

86.103.53.133 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 44%: ?

44%

ISP	TNG Stadtnetz GmbH
Usage Type	Fixed Line ISP
ASN	AS13101
Hostname(s)	86-103-53-133.ip.tng.de
Domain Name	tng.de
Country	🇩🇪 Germany
City	Schwabisch Gmund, Baden-Wurttemberg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 86.103.53.133

Whois 86.103.53.133

IP Abuse Reports for 86.103.53.133:

This IP address has been reported a total of 9 times from 7 distinct sources. 86.103.53.133 was first reported on July 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 08:42:56 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 86.103.53.133 (86-103-53-133.ip.tng.de): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 86.103.53.133 (86-103-53-133.ip.tng.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 04:42:50.547285 2026] [security2:error] [pid 17236:tid 17236] [client 86.103.53.133:30219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 86.103.53.133 (+1 hits since last alert)\|apexandroids.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "apexandroids.com"] [uri "/xmlrpc.php"] [unique_id "akoZCi8wL_lzZDg23Zr-kQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-05 03:00:32 (1 day ago)	(xmlrpc) Failed xmlrpc access from 86.103.53.133 (DE/Germany/86-103-53-133.ip.tng.de): 5 in the last ... show more (xmlrpc) Failed xmlrpc access from 86.103.53.133 (DE/Germany/86-103-53-133.ip.tng.de): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 k3rn3l109	2026-07-05 02:50:07 (1 day ago)	Sentinel honeypot: cf-waf-auto hit on sentinelmdm.com UA=Jetpack by WordPress.com (Jetpack 12.0; Wor ... show more Sentinel honeypot: cf-waf-auto hit on sentinelmdm.com UA=Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3) show less	Hacking
Anonymous	2026-07-04 21:41:40 (1 day ago)	(wordpress) Failed wordpress login from 86.103.53.133 (DE/Germany/86-103-53-133.ip.tng.de)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 17:27:03 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 86.103.53.133 (86-103-53-133.ip.tng.de): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 86.103.53.133 (86-103-53-133.ip.tng.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 13:26:58.140181 2026] [security2:error] [pid 16166:tid 16166] [client 86.103.53.133:30785] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 86.103.53.133 (+1 hits since last alert)\|calvaryadminservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "calvaryadminservices.com"] [uri "/xmlrpc.php"] [unique_id "aklCYlhkdumUXEh0Unat9wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-07-04 17:03:09 (2 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇩🇪 Marc	2026-07-04 15:51:05 (2 days ago)	86.103.53.133 - - [04/Jul/2026:17:50:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3298 "-" "WordPress.c ... show more 86.103.53.133 - - [04/Jul/2026:17:50:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3298 "-" "WordPress.com; https://wordpress.com" 86.103.53.133 - - [04/Jul/2026:17:50:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3299 "-" "WordPress.com; https://wordpress.com" 86.103.53.133 - - [04/Jul/2026:17:51:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3300 "-" "Jetpack/12.5; WordPress/6.2; http://site13790473.com" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 11:57:48 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 86.103.53.133 (86-103-53-133.ip.tng.de): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 86.103.53.133 (86-103-53-133.ip.tng.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 07:57:41.689012 2026] [security2:error] [pid 4689:tid 4689] [client 86.103.53.133:30356] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 86.103.53.133 (+1 hits since last alert)\|nordicbuilders.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nordicbuilders.net"] [uri "/xmlrpc.php"] [unique_id "akj1NXDiJtCNUBt6pcEwCwAAAF4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-07-04 09:25:07 (2 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.56.179.201

🇲🇾 124.13.125.162

🇺🇸 2607:f8b0:400e:c07::12c

🇪🇸 196.196.150.4

🇦🇷 186.134.222.144

🇮🇳 182.95.182.138

🇮🇳 182.95.176.122

🇮🇳 182.95.109.138

🇮🇳 182.95.61.82

🇷🇺 151.252.84.225

🇩🇪 151.243.11.52

🇫🇮 147.185.133.35

🇺🇸 147.185.132.224

🇦🇺 125.254.84.244

🇺🇸 71.6.232.22

🇺🇸 45.146.55.48

🇺🇸 37.19.200.104

🇮🇷 185.252.86.65

🇨🇳 182.151.45.136

🇮🇳 182.78.65.154