JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.6

104.207.54.6 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.6

Whois 104.207.54.6

IP Abuse Reports for 104.207.54.6:

This IP address has been reported a total of 69 times from 14 distinct sources. 104.207.54.6 was first reported on June 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-05-27 18:28:49 (1 week ago)	2.219 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇩🇪 abdubhai	2026-05-25 12:56:24 (2 weeks ago)	104.207.54.6 - - [25/May/2026:17 ...	Brute-Force
🇬🇷 Staging	2026-05-25 11:08:00 (2 weeks ago)	Pera Banned ASN, Dangerous	Bad Web Bot Hacking
🇳🇱 jjnxpct	2026-03-30 03:49:48 (2 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /index.php (Rule ID: 942540) - SQL Authentication bypass (split query) [Suspicious: '; found within ARGS:product_id: ';] show less	Web App Attack SQL Injection Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 11:59:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:58:56.531327 2025] [security2:error] [pid 2825091:tid 2825091] [client 104.207.54.6:39907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cedricwillems.be"] [uri "/.env"] [unique_id "aSbrgLn3Q7QBsp9LAOJIHAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:02:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:02:46.077434 2025] [security2:error] [pid 7621:tid 7621] [client 104.207.54.6:12403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.inetbrain.com"] [uri "/.svn/wc.db"] [unique_id "aSamFkWCfh68_aw0DPct_AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:27:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:27:13.373332 2025] [security2:error] [pid 24354:tid 24354] [client 104.207.54.6:9173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kimpitchellandassociatesinc.com"] [uri "/.env"] [unique_id "aSadwZXUOdGDql1IbcajvwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:12:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:12:55.977383 2025] [security2:error] [pid 3365543:tid 3365658] [client 104.207.54.6:32851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.managementconsultant.us"] [uri "/.env"] [unique_id "aSZiJ2zJ-U6IElkF6xNl-gAAAck"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:11:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:11:04.962241 2025] [security2:error] [pid 23582:tid 23582] [client 104.207.54.6:57725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gasoilliquidsdaily.com"] [uri "/.git/HEAD"] [unique_id "aSP2-Dpef2Z0RB9j1C55owAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:48:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:48:00.344284 2025] [security2:error] [pid 14702:tid 14702] [client 104.207.54.6:57837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bonefrog.com"] [uri "/.svn/wc.db"] [unique_id "aSPVcPIkqyHtW_SGnnFfSwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-10 08:43:42 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 11:21:12 (7 months ago)	Attempted brute force login to web vpn 55 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 55 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 19:34:12 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 10:12:13 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:37:38 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 138.91.105.36

🇮🇳 2401:4900:8831:4b84:f995:6270:689:5b3b

🇮🇳 182.95.233.154

🇳🇱 173.194.170.88

🇮🇳 154.221.35.72

🇭🇰 152.32.132.28

🇵🇰 113.203.203.231

🇳🇱 102.129.200.117

🇫🇷 91.196.152.6

🇫🇷 54.36.102.244

🇧🇷 35.199.119.13

🇺🇸 20.102.92.72

🇩🇪 213.209.159.56

🇺🇸 173.239.211.132

🇧🇷 172.217.35.148

🇺🇸 172.178.16.179

🇻🇳 171.231.177.214

🇻🇳 171.231.177.100

🇺🇸 165.154.162.19

🇺🇸 164.92.115.22