JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.37

104.207.54.37 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.37

Whois 104.207.54.37

IP Abuse Reports for 104.207.54.37:

This IP address has been reported a total of 130 times from 15 distinct sources. 104.207.54.37 was first reported on June 18th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Thaliruth	2026-06-12 07:30:10 (1 week ago)	104.207.54.37 - - [12/Jun/2026:09:30:09 +0200] "GET /sitemap.xml.gz HTTP/1.1" 301 162 "-" "Mozilla/5 ... show more 104.207.54.37 - - [12/Jun/2026:09:30:09 +0200] "GET /sitemap.xml.gz HTTP/1.1" 301 162 "-" "Mozilla/5.0" 104.207.54.37 - - [12/Jun/2026:09:30:09 +0200] "GET /sitemap.xml.gz HTTP/1.1" 404 3724 "-" "Mozilla/5.0" ... show less	Brute-Force Web App Attack
Anonymous	2026-05-19 21:36:50 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-12-21 10:53:01 (6 months ago)	Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:58:03 (6 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-02 08:48:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:48:16.824009 2025] [security2:error] [pid 4500:tid 4500] [client 104.207.54.37:16487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.git/HEAD"] [unique_id "aS6n0C731Em-NnP3B9AyIgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 07:54:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:54:51.375956 2025] [security2:error] [pid 22507:tid 22507] [client 104.207.54.37:39473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithbowles.com"] [uri "/.env"] [unique_id "aS6bSyp4t8peDL-E5dgxowAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 06:03:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:02:59.514611 2025] [security2:error] [pid 14369:tid 14369] [client 104.207.54.37:9979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikini.com"] [uri "/.svn/wc.db"] [unique_id "aS6BE9zcams_X2OpNrVNXwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:33:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:33:37.567292 2025] [security2:error] [pid 4312:tid 4312] [client 104.207.54.37:35623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertlundquist.com"] [uri "/.env"] [unique_id "aS5sIYXzxGfhgaVaa8oZMgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2025-12-02 00:49:18 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
Anonymous	2025-12-01 23:26:57 (6 months ago)	Attempted brute force login to web vpn 866 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 866 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:30:26 (6 months ago)	Attempted brute force login to web vpn 920 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 920 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:42:06 (6 months ago)	Attempted brute force login to web vpn 1170 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 1170 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-18 23:59:08 (7 months ago)	Attempted brute force login to web vpn 270 time(s); last attempt for 2025.11.18 is noted in report t ... show more Attempted brute force login to web vpn 270 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 02:45:34 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 18:05:29 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.214.226

🇵🇰 103.18.14.221

🇱🇹 45.227.254.170

🇧🇷 45.205.1.241

🇨🇳 39.146.238.121

🇳🇱 204.76.203.36

🇧🇪 198.235.24.205

🇦🇲 195.250.79.2

🇰🇷 119.203.251.187

🇨🇳 118.196.142.135

🇩🇪 89.163.206.178

🇫🇷 85.217.140.28

🇨🇳 59.36.78.66

🇬🇧 44.30.120.24

🇫🇷 185.197.249.223

🇱🇾 154.127.69.8

🇮🇳 152.32.156.138

🇳🇱 91.92.40.7

🇱🇹 81.30.98.44

🇺🇸 44.224.245.14