JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.87

104.207.54.87 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.87

Whois 104.207.54.87

IP Abuse Reports for 104.207.54.87:

This IP address has been reported a total of 132 times from 19 distinct sources. 104.207.54.87 was first reported on June 11th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2026-06-14 06:20:02 (2 days ago)	DNS - Multiple recursive query request denied	DNS Poisoning Hacking
🇬🇧 PeravixGroup	2026-05-22 13:16:32 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-05-18 22:00:55 (4 weeks ago)	Auto-ban: >3000 req/min op 2026-05-18	Web App Attack SSH Hacking
Anonymous	2026-04-27 20:03:50 (1 month ago)	Fail2ban filtered ...	Web App Attack
🇨🇳 ThreatBook.io	2026-04-17 23:46:13 (1 month ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.54.87 20 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.54.87 2026-04-17 19:10:40 /api/swagger.json 2026-04-17 19:10:39 /swagger/docs/v1 2026-04-17 19:10:37 /prod-api/v2/api-docs 2026-04-17 19:10:40 /v3/api-docs 2026-04-17 19:10:37 /v2/api-docs 2026-04-17 19:10:38 /swagger/v1/swagger.json show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-09 23:30:54 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 2026-04-09 07:05:27 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-13 00:13:17 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 2026-01-12 04:53:33 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-01-12 04:53:31 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-04 23:29:19 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 2026-01-04 18:40:16 /swagger/docs/v1 2026-01-04 18:40:13 /prod-api/v2/api-docs 2026-01-04 18:40:14 /v2/api-docs 2026-01-04 18:40:17 /api/swagger.json 2026-01-04 18:40:15 /swagger/v1/swagger.json 2026-01-04 18:40:19 /v3/api-docs show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:43 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇳 ThreatBook.io	2025-12-17 23:45:59 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.54.87 2025-12-17 23:41:20 /view/systemConfig/systemTool/ping/ping.php?text_target=127.0.0.1&text_pingcount=1&text_packetsize=64%7Cnetstat show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 23:15:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:15:13.230611 2025] [security2:error] [pid 11914:tid 11914] [client 104.207.54.87:31597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thompsonboatworks.com"] [uri "/.git/HEAD"] [unique_id "aS9zAb-FLnFhEUuJeiNw8QAAADs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:58:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:57:58.724641 2025] [security2:error] [pid 11234:tid 11234] [client 104.207.54.87:26259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title40.com"] [uri "/.git/HEAD"] [unique_id "aS9u9iCN_r26UIt8ZBKLZAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:07:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:07:26.513606 2025] [security2:error] [pid 4219:tid 4219] [client 104.207.54.87:20105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juliajimmy.com"] [uri "/.svn/wc.db"] [unique_id "aS9jHpHFRiqa-XQVHPtBNgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 20:47:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:47:37.840250 2025] [security2:error] [pid 4099:tid 4099] [client 104.207.54.87:32973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "premierveterinarysurgery.com"] [uri "/.svn/wc.db"] [unique_id "aS9QafQjtmuN73vd9n9oZgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:32:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:32:23.541336 2025] [security2:error] [pid 18684:tid 18684] [client 104.207.54.87:27683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ndezrojo.com"] [uri "/.git/HEAD"] [unique_id "aS8-x4_poxynNBkY6ITboQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 183.103.144.200

🇨🇳 101.126.89.35

🇬🇧 2a06:4880:2000::3e

🇰🇷 222.108.109.37

🇨🇳 183.201.208.25

🇮🇳 103.91.246.73

🇳🇱 93.123.109.62

🇮🇩 36.64.131.68

🇨🇦 35.183.208.111

🇺🇸 18.119.209.50

🇵🇱 213.92.223.31

🇬🇧 193.163.125.149

🇰🇷 193.123.235.181

🇨🇳 183.224.219.194

🇻🇪 38.188.238.35

🇻🇪 190.142.97.50

🇮🇳 182.78.240.94

🇨🇳 180.76.98.88

🇺🇸 148.153.193.85

🇺🇸 148.153.32.19