JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.51

104.207.54.51 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 38%: ?

38%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.51

Whois 104.207.54.51

IP Abuse Reports for 104.207.54.51:

This IP address has been reported a total of 155 times from 32 distinct sources. 104.207.54.51 was first reported on June 19th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-06-16 02:15:05 (5 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-06-16 01:14:15 (5 days ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=nikolopoulos-dikigoros.gr; logs=/var/log/httpd/domains/ ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=nikolopoulos-dikigoros.gr; logs=/var/log/httpd/domains/nikolopoulos-dikigoros.gr.log; samples=site_wide=true \| distinct_ips=16 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-15 21:12:59 (5 days ago)	(y4) Failed scan -byebye- from 104.207.54.51 (DE/Germany/-): (CF_ENABLE)	Hacking
🇬🇷 setupgr	2026-06-13 12:17:49 (1 week ago)	(mod_security) mod_security (id:900001) triggered by 104.207.54.51: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:900001) triggered by 104.207.54.51: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 15:17:47.051998 2026] [security2:error] [pid 784504:tid 784690] [client 104.207.54.51:30227] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ai1Ka8EgqLHd_cJk2hHJPwAAAI4"], referer: https://villa-izabela.com/wp-login.php show less	Port Scan
Anonymous	2026-06-12 07:03:07 (1 week ago)	[server.tmg.gr] httpd-login-spray-site: sites=infectionsinstitute.com; logs=/var/log/httpd/domains/i ... show more [server.tmg.gr] httpd-login-spray-site: sites=infectionsinstitute.com; logs=/var/log/httpd/domains/infectionsinstitute.com.log; samples=site_wide=true \| distinct_ips=30 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 pm33	2026-06-03 16:18:17 (2 weeks ago)	Wordpress login attempts	Brute-Force
🇺🇸 lostswordfish.com	2026-05-31 12:32:04 (2 weeks ago)	Wordfence waf block on fypeducation	Web App Attack
🇲🇽 octageeks.com	2026-05-30 04:12:36 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 agenciahypelab.com.br	2026-05-16 15:47:58 (1 month ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇱🇻 garmtech.com	2026-04-30 04:07:44 (1 month ago)	Attempted access to sensitive endpoint (/.env.local) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.env.local) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 fleckenbase	2026-03-10 06:04:19 (3 months ago)	[Tue Mar 10 07:04:17.843393 2026] [php:notice] [pid 3378922:tid 3378922] [client 104.207.54.51:28519 ... show more [Tue Mar 10 07:04:17.843393 2026] [php:notice] [pid 3378922:tid 3378922] [client 104.207.54.51:28519] Attack: type [(20)20=3] from 104.207.54.51 redir to google [Tue Mar 10 07:04:19.821918 2026] [php:notice] [pid 3380917:tid 3380917] [client 104.207.54.51:38599] Attack: type [(19)19] from 104.207.54.51 redir to google ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 www.winos.me	2026-03-09 17:40:44 (3 months ago)	Banned due to high error rate on HTTP/1.1 protocol	Brute-Force Web App Attack
🇷🇴 INTEQ	2026-02-25 01:42:31 (3 months ago)	Web SQL inject attack from 104.207.54.51	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:34:33 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.51 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:34:28.477142 2026] [security2:error] [pid 18817:tid 18817] [client 104.207.54.51:39301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "questiondezyn.com"] [uri "/site/.git/config"] [unique_id "aZG9VHBQQ1H83To1NVtX0AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mauri64	2026-02-15 12:00:17 (4 months ago)	lfd - (mod_security) mod_security (id:949110) triggered by 104.207.54.51 (-): 5 in the last 3600 sec ... show more lfd - (mod_security) mod_security (id:949110) triggered by 104.207.54.51 (-): 5 in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.241.173.104

🇰🇿 176.222.189.242

🇫🇷 158.220.125.127

🇺🇸 107.172.188.122

🇳🇱 91.92.40.15

🇰🇪 41.220.233.254

🇫🇷 5.196.106.17

🇰🇿 2.135.185.150

🇳🇱 213.152.161.54

🇺🇸 172.93.106.153

🇨🇳 110.249.201.229

🇺🇸 91.230.168.171

🇳🇱 91.92.40.10

🇫🇷 86.110.51.41

🇺🇸 74.235.203.125

🇧🇷 45.5.249.237

🇨🇳 27.43.206.215

🇬🇧 2a06:4880:8000::b0

🇩🇪 167.94.146.40

🇵🇰 119.73.7.242