JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.43.54

104.207.43.54 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.43.54

Whois 104.207.43.54

IP Abuse Reports for 104.207.43.54:

This IP address has been reported a total of 132 times from 18 distinct sources. 104.207.43.54 was first reported on June 19th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-01 01:14:59 (1 week ago)	Brute force	Brute-Force
🇱🇻 garmtech.com	2026-05-14 21:16:12 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-16.104.207.43.54.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-16.104.207.43.54.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-09 16:12:02 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-12.104.207.43.54.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-12.104.207.43.54.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇬🇧 PeravixGroup	2026-05-09 15:03:58 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-07 20:21:10 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 kjaerulff	2026-03-17 15:57:22 (2 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
Anonymous	2026-01-05 06:14:30 (5 months ago)	Infected user bad webscan	Exploited Host
🇺🇸 inspectorgdgt	2025-12-26 22:00:33 (5 months ago)	Credential brute-force login attempts observed (e.g., SSLVPN/auth failures).	Brute-Force
🇮🇹 VHosting	2025-12-24 04:05:23 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 07:27:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:27:45.891245 2025] [security2:error] [pid 27091:tid 27091] [client 104.207.43.54:42421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.paxbrewing.com"] [uri "/.env"] [unique_id "aSVacS-L2iU-O9uVe0LlRAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:29:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:29:16.249448 2025] [security2:error] [pid 15264:tid 15264] [client 104.207.43.54:21685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "donzie.com"] [uri "/.env"] [unique_id "aSUwnNnSPOrEB_iaGjZDxwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2025-10-09 13:43:45 (8 months ago)	GlobalProtect login attempts with user sgrubb.	VPN IP Brute-Force
Anonymous	2025-10-05 23:35:14 (8 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 22:03:54 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.04 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-30 13:58:32 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.30 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.115.100.143

🇪🇪 83.166.50.15

🇱🇹 45.227.254.170

🇻🇳 14.177.242.69

🇺🇸 13.89.121.92

🇧🇷 200.115.102.162

🇧🇷 200.115.100.210

🇮🇩 163.7.6.41

🇧🇷 136.248.121.226

🇨🇳 117.72.205.87

🇻🇳 113.160.185.58

🇨🇱 34.176.215.109

🇧🇷 200.115.101.67

🇧🇷 179.179.194.91

🇩🇿 154.241.37.197

🇺🇸 135.232.200.22

🇧🇬 78.128.114.66

🇺🇸 64.62.156.93

🇫🇷 54.36.120.31

🇧🇷 200.115.102.131