JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.119

104.207.54.119 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.119

Whois 104.207.54.119

IP Abuse Reports for 104.207.54.119:

This IP address has been reported a total of 144 times from 24 distinct sources. 104.207.54.119 was first reported on June 6th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-02 23:05:50 (2 weeks ago)	Login Too Frequent (6)	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-05-30 12:16:15 (2 weeks ago)	(y4) Failed scan -byebye- from 104.207.54.119 (DE/Germany/-): (CF_ENABLE)	Hacking
🇩🇪 F242	2026-05-28 02:38:58 (3 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 lostswordfish.com	2026-05-27 12:34:03 (3 weeks ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇩🇪 4server	2026-04-24 07:02:20 (1 month ago)	[FriApr2409:02:16.4982712026][security2:error][pid3265762:tid3265866][client104.207.54.119:0]ModSecu ... show more [FriApr2409:02:16.4982712026][security2:error][pid3265762:tid3265866][client104.207.54.119:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aesVeJZrsibgaGn23uKLhgAAAYk\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-22 19:16:26 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.54.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.54.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 14:16:18.137529 2026] [security2:error] [pid 4323:tid 4323] [client 104.207.54.119:52877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|goodpage.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goodpage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZtWAsydTKtUMhk4WYimtwAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 10:45:03 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.54.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.54.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 05:44:56.457354 2026] [security2:error] [pid 8496:tid 8496] [client 104.207.54.119:48625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jkg1.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jkg1.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZmMqCMDvhsBpXBA9K5bxwAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2025-12-11 04:57:36 (6 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 12/11/2025 4:57 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-08 09:11:51 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-01 08:54:06 (6 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 Psycho Solutions LLC	2025-11-27 13:57:16 (6 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 11/27/2025 1:57 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-27 12:15:27 (6 months ago)		Web App Attack
🇧🇪 voormedia	2025-11-02 00:36:35 (7 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇦🇺 MAGIC	2025-10-26 02:01:31 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.98.77.238

🇳🇱 185.226.197.28

🇳🇱 185.226.197.27

🇩🇪 164.92.250.106

🇺🇸 162.216.150.91

🇺🇸 162.216.149.130

🇸🇬 139.59.244.68

🇨🇳 101.96.225.252

🇨🇳 1.80.81.55

🇩🇪 212.132.78.209

🇹🇳 197.5.145.102

🇧🇩 103.96.37.170

🇱🇹 81.30.98.144

🇱🇹 62.60.130.139

🇨🇳 36.33.40.84

🇰🇷 221.156.126.1

🇺🇸 147.185.132.80

🇮🇳 122.185.44.206

🇺🇸 104.207.41.58

🇰🇷 220.124.246.169