This IP address has been reported a total of
32
times from
32 distinct
sources.
104.207.145.170 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
France
with 6
reports;
Netherlands
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
26
times;
Hacking
11
times;
Brute-Force
7
times;
Port Scan
3
times;
Bad Web Bot
3
times;
Other
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CrowdSec-detected attack, scenario(s): CVE-2017-9841 -- e.g. GET /vendor/phpunit/phpunit/src/Util/PH ...
show moreCrowdSec-detected attack, scenario(s): CVE-2017-9841 -- e.g. GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php (HTTP 503)
show less
[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ...
show more[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence:
104.207.145.170 - - [26/Oct/2026:04:19:53 +0000] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
104.207.145.170 - - [26/Oct/2026:04:19:54 +0000] "GET /.env HTTP/1.1" 404 4495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
104.207.145.170 - - [26/Oct/2026:04:20:03 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
show less
Exploit attempt for CVE-2017-9841: GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php [1 event, ...
show moreExploit attempt for CVE-2017-9841: GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php [1 event, 2026-10-26T04:13:19Z; auto-reported by CrowdSec]
show less
