JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.188

104.207.54.188 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.188

Whois 104.207.54.188

IP Abuse Reports for 104.207.54.188:

This IP address has been reported a total of 139 times from 20 distinct sources. 104.207.54.188 was first reported on July 4th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-21 06:40:01 (4 weeks ago)	suspicious request in access.log	Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 22:08:47 (1 month ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.54.188 2026-05-07 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.54.188 2026-05-07 10:57:57 /api/swagger.json 2026-05-07 10:57:58 /v3/api-docs 2026-05-07 10:57:55 /prod-api/v2/api-docs 2026-05-07 10:57:56 /swagger/v1/swagger.json 2026-05-07 10:57:56 /v2/api-docs 2026-05-07 10:57:57 /swagger/docs/v1 show less	Web App Attack
🇨🇭 ALPHANET	2026-04-30 12:48:46 (1 month ago)	web exploits	Hacking Exploited Host Web App Attack
🇮🇩 Burayot	2026-04-28 03:26:23 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.207.54.188 (DE/Germany/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.207.54.188 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇫🇷 masterguru	2026-04-18 01:40:44 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.54.188 (DE/Germany/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.54.188 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇮🇹 [email protected]	2026-04-17 22:36:48 (2 months ago)	[Sat Apr 18 00:36:47.747575 2026] [authz_core:error] [pid 560721:tid 560764] [remote 104.207.54.188: ... show more [Sat Apr 18 00:36:47.747575 2026] [authz_core:error] [pid 560721:tid 560764] [remote 104.207.54.188:57939] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-17 22:07:08 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.54.188 2026-04-17 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.54.188 2026-04-17 06:52:57 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-04-17 06:52:56 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-04-17 07:52:25 /manager/html show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇨🇳 ThreatBook.io	2026-03-01 22:09:06 (3 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.54.188 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.54.188 2026-03-01 14:41:53 /v1/core/cluster/nodes?withInstances=false&pageNo=1&pageS%20ize=10&keyword show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-01 22:10:29 (4 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.54.188 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.54.188 2026-02-01 11:30:14 / show less	Web App Attack
🇫🇷 vtchost.com	2026-01-14 09:50:16 (5 months ago)	ignoring robots.txt / fell into a honeypot, yummy! ...	Bad Web Bot Exploited Host
🇨🇳 ThreatBook.io	2026-01-09 22:10:37 (5 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.54.188 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.54.188 2026-01-09 10:41:44 /druid/index.html show less	Web App Attack
Anonymous	2026-01-05 20:15:52 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:44 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-24 07:03:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:02:48.256598 2025] [security2:error] [pid 13942:tid 14018] [client 104.207.54.188:43181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.classactionlawsuit.org"] [uri "/.git/HEAD"] [unique_id "aSQDGA9TCbHXOd9uq_eNiQAAAcs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.242.177.178

🇱🇹 81.30.98.225

🇩🇪 79.110.62.71

🇧🇪 74.125.73.89

🇺🇸 74.87.117.149

🇺🇸 66.132.195.62

🇫🇷 66.93.151.122

🇫🇮 62.60.152.192

🇬🇧 35.203.210.241

🇪🇹 196.190.180.18

🇦🇱 193.163.187.107

🇨🇳 113.140.95.2

🇰🇪 105.27.148.94

🇫🇷 85.217.140.41

🇳🇱 45.148.10.147

🇮🇳 43.224.3.154

🇰🇪 41.139.224.177

🇫🇷 2a09:bac5:34b6:14dc::214:8b

🇩🇪 2400:cb00:932:1000:5c23:276a:1169:e57a

🇨🇳 111.228.42.144