JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.197

104.207.54.197 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 39%: ?

39%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.197

Whois 104.207.54.197

IP Abuse Reports for 104.207.54.197:

This IP address has been reported a total of 134 times from 19 distinct sources. 104.207.54.197 was first reported on June 11th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-01 21:56:47 (1 day ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 almazick	2026-08-31 17:53:29 (2 days ago)	Fail2Ban jail window on srv1.windowrepair.us banned 104.207.54.197 after 1 attempts	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-08-31 14:17:05 (2 days ago)	(wplogin_block) Blocked WP-Login Access Attempt 104.207.54.197 (DE/Germany/State of Berlin/Berlin/-/ ... show more (wplogin_block) Blocked WP-Login Access Attempt 104.207.54.197 (DE/Germany/State of Berlin/Berlin/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.207.54.197 - - [31/Aug/2026:17:16:55 +0300] "POST /wp-login.php HTTP/1.1" 503 7315 "https://villa-izabela.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" show less	Port Scan
🇮🇹 Progetto1	2026-08-31 09:40:06 (2 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 conseilgouz	2026-08-31 07:26:21 (2 days ago)	sle-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇮🇹 VHosting	2026-08-28 20:40:06 (5 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 02:32:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:32:07.580888 2026] [security2:error] [pid 6947:tid 7016] [client 104.207.54.197:51079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nataxcyber.com.venezuelaguia.com"] [uri "/.git/config"] [unique_id "aZ0Np_jfzd21mDLilfE07QAAARI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 14:40:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 09:40:35.959589 2026] [security2:error] [pid 28467:tid 28467] [client 104.207.54.197:54535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sympalais.boens.org"] [uri "/.git/config"] [unique_id "aZxm46_lIqf_84zzfWy6qgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:18:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:18:16.648998 2026] [security2:error] [pid 19307:tid 19307] [client 104.207.54.197:9591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mentalmolecule.com"] [uri "/v2/.git/config"] [unique_id "aY7eSKXaxjJKLTlCMAEA5QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:12:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:12:37.967470 2026] [security2:error] [pid 10361:tid 10361] [client 104.207.54.197:26875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcginleyclan.com"] [uri "/test/.git/config"] [unique_id "aY7A1Yxq-F3_uLKqRAB8bAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-02-12 20:16:54 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 16:27:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:27:35.388602 2026] [security2:error] [pid 9887:tid 9887] [client 104.207.54.197:24249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dsjostrom.com"] [uri "/.git/config"] [unique_id "aY3_dyltLl5ocuPwDz14CQAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 16:07:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:07:31.447131 2026] [security2:error] [pid 118206:tid 118206] [client 104.207.54.197:23271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disneylawsuit.com"] [uri "/.git/config"] [unique_id "aY36w8oWPi95kpKJzPgh-AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2026-02-11 00:48:15 (6 months ago)	Web App Attack	Web App Attack
Anonymous	2026-01-03 13:41:02 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 217.165.3.201

🇰🇷 210.90.203.35

🇩🇪 209.38.240.145

🇺🇸 184.186.73.70

🇺🇸 172.203.133.182

🇳🇱 94.154.43.249

🇵🇱 89.229.161.41

🇷🇺 89.223.125.204

🇰🇿 89.218.69.66

🇩🇪 47.245.142.160

🇮🇩 36.64.68.99

🇬🇧 35.203.210.175

🇮🇱 34.165.195.18

🇬🇧 2.57.17.14

🇺🇸 2604:a880:400:d1:0:4:e8d8:a001

🇦🇲 195.250.79.2

🇳🇱 185.136.15.11

🇨🇱 172.217.39.157

🇦🇷 153.67.183.102

🇭🇰 118.193.38.134