JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.137

104.207.54.137 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.137

Whois 104.207.54.137

IP Abuse Reports for 104.207.54.137:

This IP address has been reported a total of 132 times from 22 distinct sources. 104.207.54.137 was first reported on June 7th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-06 08:51:36 (1 month ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇦🇺 oncord	2026-03-05 09:34:33 (3 months ago)	Form spam	Web Spam
🇫🇷 Sklurk	2026-03-01 12:23:18 (3 months ago)	Web App Attack	Web App Attack
🇺🇸 oncord	2026-02-20 16:25:51 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-15 02:43:27 (4 months ago)	Form spam	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:14 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-24 11:15:03 (7 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:39:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:39:18.111592 2025] [security2:error] [pid 14802:tid 14802] [client 104.207.54.137:23507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.altoshp.com"] [uri "/.svn/wc.db"] [unique_id "aSQnxjTo0wKwjK0eXOjPUQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:13:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:13:42.155459 2025] [security2:error] [pid 12103:tid 12150] [client 104.207.54.137:38243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacalodge.com"] [uri "/.env"] [unique_id "aSQTtud3pxroRSWDTtp9fgAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:24:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:24:06.921167 2025] [security2:error] [pid 14628:tid 14628] [client 104.207.54.137:46315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.crockett.ws"] [uri "/.svn/wc.db"] [unique_id "aSPP1ppzKIBmUv9DpTeDMwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Steve	2025-10-26 05:40:55 (7 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
Anonymous	2025-04-07 09:18:48 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 07:58:09 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:54:00 (1 year ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 03:20:52 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 205.254.168.140

🇨🇱 34.176.166.98

🇷🇺 193.233.48.169

🇺🇸 166.239.184.117

🇺🇸 162.144.88.224

🇺🇸 136.119.87.148

🇸🇬 103.189.235.176

🇧🇩 103.114.97.97

🇬🇧 88.215.1.201

🇪🇸 82.223.15.252

🇨🇳 61.178.209.47

🇺🇦 45.11.57.172

🇮🇩 16.78.21.156

🇨🇭 13.105.180.76

🇺🇸 2a03:2880:f800:40::

🇭🇺 217.65.97.138

🇺🇸 203.88.119.100

🇬🇧 195.206.182.195

🇺🇸 162.216.150.13

🇩🇪 156.236.31.85