JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.62.198

104.207.62.198 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.62.198

Whois 104.207.62.198

IP Abuse Reports for 104.207.62.198:

This IP address has been reported a total of 119 times from 11 distinct sources. 104.207.62.198 was first reported on June 6th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-06-06 14:25:38 (5 days ago)	104.207.62.198 - - [06/Jun/2026:16:25:37 +0200] "GET /wp-admin/plugins.php HTTP/1.1" 403 6451 "-" "c ... show more 104.207.62.198 - - [06/Jun/2026:16:25:37 +0200] "GET /wp-admin/plugins.php HTTP/1.1" 403 6451 "-" "curl/7.88.1" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 06:05:17 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.62.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.62.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 01:05:13.143559 2026] [security2:error] [pid 25408:tid 25408] [client 104.207.62.198:20941] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|h-mod.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "h-mod.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZvuGZE4ixcCVp3VK6PKVgAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-21 23:42:48 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 20:49:00 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.62.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.62.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 15:48:55.481720 2026] [security2:error] [pid 10291:tid 10291] [client 104.207.62.198:43619] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bradsalerno.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bradsalerno.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZoaN3Co85MJU2tjAxo3LQAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-05 01:01:37 (5 months ago)	Infected user bad webscan	Exploited Host
🇫🇷 security.yc3a.com	2025-10-25 05:11:24 (7 months ago)	104.207.62.198 - - [25/Oct/2025:05:11:24 +0000] "GET /wp-login.php HTTP/2.0" 301 162 "https://proteu ... show more 104.207.62.198 - - [25/Oct/2025:05:11:24 +0000] "GET /wp-login.php HTTP/2.0" 301 162 "https://proteushop.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.7390.77 Safari/537.36" show less	Brute-Force Web App Attack
Anonymous	2025-10-11 01:03:02 (8 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-04-07 10:49:54 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 22:56:26 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 10:09:53 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 04:54:34 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 14:52:44 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-01 13:34:20 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-31 22:58:16 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.03.31 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.03.31 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-30 07:57:32 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.03.30 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.03.30 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 92.118.126.243

🇳🇱 45.153.34.235

🇬🇧 37.156.64.71

🇺🇸 152.32.205.153

🇱🇹 81.30.98.44

🇹🇼 59.126.36.143

🇳🇱 45.153.34.71

🇪🇸 45.13.229.77

🇩🇪 213.209.159.238

🇦🇺 203.206.8.253

🇸🇬 194.5.82.114

🇦🇪 145.241.123.102

🇺🇸 137.184.151.110

🇺🇸 104.23.251.89

🇳🇴 85.19.195.12

🇺🇸 68.154.39.255

🇮🇹 34.17.106.96

🇺🇸 18.97.43.85

🇬🇧 193.123.185.31

🇳🇱 172.71.98.27