AbuseIPDB » 204.188.197.13

204.188.197.13 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 100%: ?

100%

ISP	RevGen Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46844
Domain Name	revgennetworks.com
Country	United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 204.188.197.13

Whois 204.188.197.13

IP Abuse Reports for 204.188.197.13:

This IP address has been reported a total of 117 times from 89 distinct sources. 204.188.197.13 was first reported on May 28th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
geot	2025-06-21 15:58:28 (3 weeks ago)	GET /password.php HTTP/1.1 GET /form.html HTTP/1.1 GET /systembc/password.php HTTP/1.1<b ... show moreGET /password.php HTTP/1.1 GET /form.html HTTP/1.1 GET /systembc/password.php HTTP/1.1 GET /t4 HTTP/1.1 GET /1.php HTTP/1.1 GET /upl.php HTTP/1.1 GET /geoip/ HTTP/1.1 show less	Bad Web Bot Web App Attack
ThreatBook.io	2025-06-21 01:06:13 (3 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/204.188.197.13 2 ... show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/204.188.197.13 2025-06-20 14:37:56 /1.php 2025-06-20 14:37:56 /t4 2025-06-20 14:37:58 /form.html 2025-06-20 14:37:59 /upl.php 2025-06-20 14:37:59 /geoip/ show less	Web App Attack
Security_Whaller	2025-06-20 12:23:20 (3 weeks ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
dwmosaics	2025-06-20 12:18:57 (3 weeks ago)	"x16x03x01" 400 0 "-" "-"	Brute-Force Web App Attack
Gabriel Camargo	2025-06-20 12:15:46 (3 weeks ago)	204.188.197.13 - - [20/Jun/2025:07:15:46 -0500] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" 2 ... show more204.188.197.13 - - [20/Jun/2025:07:15:46 -0500] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" 204.188.197.13 - - [20/Jun/2025:07:15:46 -0500] "GET /1.php HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 204.188.197.13 - - [20/Jun/2025:07:15:46 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" ... show less	Brute-Force SSH
ggb_st	2025-06-20 12:04:40 (3 weeks ago)	[Fri Jun 20 15:04:39.277951 2025] [php:error] [pid 576724:tid 576724] [client 204.188.197.13:57728] ... show more[Fri Jun 20 15:04:39.277951 2025] [php:error] [pid 576724:tid 576724] [client 204.188.197.13:57728] script '/home/gogo/mounts/VSCODE_SRV_HDD/WEBSITE_ROOT/DOCROOT/unsecure/1.php' not found or unable to stat ... show less	Web App Attack
barbarella	2025-06-20 11:15:24 (3 weeks ago)	Multiple (7) times attack on https port 443: unsolicited access to nonexisting pages (GET /t4) <br / ... show moreMultiple (7) times attack on https port 443: unsolicited access to nonexisting pages (GET /t4) 11:15:24 searching Vulnerable php scripts (GET /1.php) 11:15:25 unsolicited access to Administrative pages (GET /form.html) 11:15:26 infected host with malware (GET /upl.php) 11:15:26 searching Geoip Security Vulnerabilities (GET /geoip/) 11:15:27 searching Vulnerable php scripts (GET /systembc/password.php) 11:15:28 searching Vulnerable php scripts (GET /password.php) show less	Hacking Web App Attack
webbfabriken	2025-06-20 11:08:26 (3 weeks ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
sajmon0011	2025-06-20 09:34:32 (3 weeks ago)	204.188.197.13 - - [20/Jun/2025:11:34:31 +0200] "\x16\x03\x01" 400 226 "-" "-" ...	Web App Attack
_ArminS_	2025-06-20 07:38:41 (3 weeks ago)	WEB-Scan 33298:80 detected 2025.06.20 09:38:41 blocked until 2025.08.09 02:41:28	Port Scan
Vinyamar	2025-06-20 07:34:41 (3 weeks ago)	VSecCenter: <BADREQ> \| Generic internal Webserver errors \| SSL Probes/Errors detected. \| 7 in 24h	Hacking
masterguru	2025-06-20 07:17:08 (3 weeks ago)	Host header is a numeric IP address. Pattern match "^ (920350-145)	Hacking Bad Web Bot
Study Bitcoin 🤗	2025-06-20 07:12:58 (3 weeks ago)	Port probe to tcp/80 (http) [srv136]	Port Scan Bad Web Bot Web App Attack
gu-alvareza	2025-06-20 07:05:08 (3 weeks ago)	SystemBC.Botnet	DDoS Attack Hacking
MPL	2025-06-20 06:34:51 (4 weeks ago)	tcp/80 (4 or more attempts)	Port Scan