JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.146

104.207.54.146 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.146

Whois 104.207.54.146

IP Abuse Reports for 104.207.54.146:

This IP address has been reported a total of 138 times from 21 distinct sources. 104.207.54.146 was first reported on June 11th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-05-23 05:03:18 (3 weeks ago)		Bad Web Bot
🇫🇷 tecnicorioja	2026-04-27 22:00:11 (1 month ago)	wp-login attack [27/Apr/2026:05:17:43	Brute-Force Web App Attack
Anonymous	2026-04-03 06:05:30 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇬🇧 oncord	2026-03-20 01:58:34 (2 months ago)	Form spam	Web Spam
Anonymous	2026-03-19 05:44:12 (2 months ago)	RUPLDE WEBFORM SPAM 104.207.54.146 (104.207.54.146)	Web Spam
🇦🇺 oncord	2026-03-17 18:09:52 (2 months ago)	Form spam	Web Spam
Anonymous	2026-03-16 15:48:42 (2 months ago)	OKADE WEBFORM SPAM 104.207.54.146 (104.207.54.146)	Web Spam
🇦🇺 oncord	2026-03-15 12:41:03 (2 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-12-08 20:34:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 15:34:15.730123 2025] [security2:error] [pid 10233:tid 10233] [client 104.207.54.146:17157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dpcfab.com"] [uri "/.env"] [unique_id "aTc2R6qNSQs893XOim0qoAAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-08 19:22:30 (6 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-08 18:07:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 13:07:03.293274 2025] [security2:error] [pid 31948:tid 31948] [client 104.207.54.146:14309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smallbizreorg.com"] [uri "/.env"] [unique_id "aTcTxyg2sL3aBfdGqug87gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 00:22:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 19:22:43.626851 2025] [security2:error] [pid 18440:tid 18440] [client 104.207.54.146:14047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owenbee.com"] [uri "/.env"] [unique_id "aTYaU_HrFCpODQo-pmtPigAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 19:05:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:05:21.687467 2025] [security2:error] [pid 21389:tid 21389] [client 104.207.54.146:59827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentsmithfamily.com"] [uri "/.git/HEAD"] [unique_id "aTXP8R4-u_yVOffu8yQm1QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 15:40:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:40:55.162637 2025] [security2:error] [pid 6738:tid 6738] [client 104.207.54.146:18223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westerncarolinabass.org"] [uri "/.svn/wc.db"] [unique_id "aTWgB_z0_xO3preDtRkQJwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-06 23:03:15 (6 months ago)	Auto-ban: >3000 req/min op 2025-12-06	Hacking Web App Attack SSH

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇹 181.188.125.7

🇺🇸 45.92.229.34

🇩🇪 45.3.44.102

🇺🇸 216.73.160.131

🇩🇪 216.26.247.2

🇩🇪 209.50.184.132

🇺🇸 208.84.100.108

🇩🇪 178.105.137.31

🇵🇭 103.186.139.149

🇰🇪 102.203.100.6

🇷🇺 94.233.127.194

🇳🇱 91.92.40.12

🇸🇪 83.255.42.9

🇷🇴 80.94.92.171

🇺🇸 71.6.242.161

🇩🇪 65.111.26.189

🇺🇸 45.8.19.55

🇩🇪 45.3.44.47

🇺🇿 31.40.29.121

🇨🇳 220.163.107.250