JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.57

104.207.39.57 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.57

Whois 104.207.39.57

IP Abuse Reports for 104.207.39.57:

This IP address has been reported a total of 165 times from 31 distinct sources. 104.207.39.57 was first reported on June 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-06-10 02:14:09 (1 month ago)	Honeypot Hit: xmlrpc.php	Web Spam Blog Spam Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-31 21:59:51 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-30. show less	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-05-31 02:16:55 (1 month ago)	929 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇨🇭 4server	2026-05-31 01:30:01 (1 month ago)	[SunMay3103:29:58.3306422026][security2:error][pid1098990:tid1099253][client104.207.39.57:0]ModSecur ... show more [SunMay3103:29:58.3306422026][security2:error][pid1098990:tid1099253][client104.207.39.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.garnimolinazzo.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"ahuPFqtCuT7svVyhq5gUhgAAARc\"] show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-05-31 01:29:55 (1 month ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 4server	2026-05-31 00:51:16 (1 month ago)	[SunMay3102:51:12.8892632026][security2:error][pid352121:tid352178][client104.207.39.57:0]ModSecurit ... show more [SunMay3102:51:12.8892632026][security2:error][pid352121:tid352178][client104.207.39.57:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.flyingberber-finale.artisteer-italia.org\"][uri\"/.git/config\"][unique_id\"ahuGAEUjSSXqnow8VwcazAAAAA4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 mnsf	2026-05-30 22:05:17 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇨🇭 4server	2026-05-21 09:37:53 (2 months ago)	[ThuMay2111:37:48.6899012026][security2:error][pid3310419:tid3310439][client104.207.39.57:0]ModSecur ... show more [ThuMay2111:37:48.6899012026][security2:error][pid3310419:tid3310439][client104.207.39.57:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.cybertelgroup.com\"][uri\"/.aws/credentials\"][unique_id\"ag7SbDaotVFcmL22qy7NnAAAABI\"] show less	Hacking Web App Attack
🇳🇱 enpepet	2026-05-21 05:09:10 (2 months ago)	GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWeb ... show more GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1 URL:/.env show less	Port Scan Hacking Brute-Force Bad Web Bot
🇦🇺 afleventoffice.com.au	2026-05-20 10:17:23 (2 months ago)	GET /.aws/credentials HTTP/1.1	Web App Attack
🇫🇮 inlink.ltd	2026-05-15 06:34:18 (2 months ago)	Known malicious PHP file or CMS probe	Web App Attack
Anonymous	2026-05-11 19:06:05 (2 months ago)	Trying to access config files	Web App Attack
🇫🇷 masterguru	2026-04-29 03:22:33 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.207.39.57 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.207.39.57 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 getaccessibleapps.com	2026-01-11 20:36:32 (6 months ago)		Web Spam

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 178.16.55.50

🇱🇹 141.98.10.78

🇹🇷 94.154.43.146

🇲🇦 81.192.46.49

🇫🇷 213.32.20.78

🇰🇪 196.207.177.56

🇧🇷 190.52.78.200

🇩🇪 188.40.137.166

🇨🇳 123.163.52.74

🇰🇿 95.58.4.6

🇬🇪 91.231.218.149

🇩🇪 91.192.10.101

🇬🇧 86.163.93.64

🇺🇸 85.208.98.22

🇧🇷 205.210.31.237

🇧🇷 200.159.14.187

🇨🇳 115.56.238.174

🇮🇳 66.116.242.235

🇺🇸 64.62.197.18

🇯🇵 8.221.142.144