JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.227

104.207.54.227 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.227

Whois 104.207.54.227

IP Abuse Reports for 104.207.54.227:

This IP address has been reported a total of 137 times from 18 distinct sources. 104.207.54.227 was first reported on June 6th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 todix	2026-07-17 15:42:34 (8 hours ago)	Web App Attack Exploid from 104.207.54.227	Web App Attack
🇫🇷 ELYAZ	2026-06-24 06:33:01 (3 weeks ago)	(y4) Failed scan -byebye- from 104.207.54.227 (DE/Germany/-): (CF_ENABLE)	Hacking
🇲🇽 octageeks.com	2026-06-22 04:14:00 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇿 billyborsht	2026-06-19 00:38:54 (4 weeks ago)	2026-06-19T12:38:53.964900+12:00 southern wordpress(kate.frykberg.co.nz)[1050234]: Authentication at ... show more 2026-06-19T12:38:53.964900+12:00 southern wordpress(kate.frykberg.co.nz)[1050234]: Authentication attempt for unknown user admin from 104.207.54.227 ... show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-18 10:04:43 (4 weeks ago)	(y4) Failed scan -byebye- from 104.207.54.227 (DE/Germany/-): (CF_ENABLE)	Hacking
🇹🇷 Detmach	2026-05-18 10:38:58 (1 month ago)	Security attack detected. Multiple failed attempts from 104.207.54.227. IP banned for 1440 minutes a ... show more Security attack detected. Multiple failed attempts from 104.207.54.227. IP banned for 1440 minutes at 18.05.2026 13:37:55. Failed attempts: 1 show less	Brute-Force
🇺🇸 LotPhantom	2025-12-04 02:09:20 (7 months ago)	104.207.54.227 - - [04/Dec/2025:02:08:20 +0000] "GET / HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows N ... show more 104.207.54.227 - - [04/Dec/2025:02:08:20 +0000] "GET / HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "0" ... show less	Web App Attack
🇦🇺 MAGIC	2025-12-02 03:13:14 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-25 07:25:03 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:24:55.890840 2025] [security2:error] [pid 2288:tid 2288] [client 104.207.54.227:25197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.turtlehill.org"] [uri "/.env"] [unique_id "aSVZxyQyDcII5uzEXlqJ7AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:39:35 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:39:31.427892 2025] [security2:error] [pid 29945:tid 29945] [client 104.207.54.227:54479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cbtattam.com"] [uri "/.env"] [unique_id "aSVPI5ORQ7tfuTDjqZ7jMwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-14 09:05:36 (8 months ago)	(From [email protected]) World's FIRST AI System That Creates PROFITABLE Amazon Books In Under ... show more (From [email protected]) World's FIRST AI System That Creates PROFITABLE Amazon Books In Under 6 Minutes Across 25+ Niches https://goldsolutions.pro/RoyaltyProfitsAI to UNSUBSCRIBE: https://goldsolutions.pro/unsubscribe?domain=crystalchiro.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-13 13:20:34 (8 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRI ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=mtjulietchiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-12 09:19:12 (8 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=falitechiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
Anonymous	2025-10-11 08:23:55 (9 months ago)	Attempted brute force login to web vpn 73 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 73 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 16:24:18 (9 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.223

🇦🇫 149.54.51.74

🇭🇰 103.210.21.242

🇧🇬 79.124.62.126

🇻🇪 38.172.172.125

🇻🇪 38.171.63.78

🇩🇪 2a09:bac5:27bb:2464::3a0:39

🇦🇫 149.54.51.42

🇷🇺 95.108.213.149

🇺🇸 91.230.168.138

🇺🇦 91.207.245.181

🇳🇱 45.148.10.151

🇺🇸 45.56.83.149

🇯🇵 43.130.249.176

🇻🇪 38.166.41.0

🇦🇷 38.159.160.185

🇬🇧 35.203.210.123

🇺🇸 20.65.195.108

🇮🇳 206.1.21.1

🇧🇷 205.210.31.186