JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.134

104.207.57.134 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.134

Whois 104.207.57.134

IP Abuse Reports for 104.207.57.134:

This IP address has been reported a total of 138 times from 25 distinct sources. 104.207.57.134 was first reported on June 11th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 martenmark	2026-06-06 10:29:22 (1 week ago)	104.207.57.134 - - [06/Jun/2026:10:29:20 +0000] "GET http://admin.beapp.co/.aws/credentials HTTP/1.1 ... show more 104.207.57.134 - - [06/Jun/2026:10:29:20 +0000] "GET http://admin.beapp.co/.aws/credentials HTTP/1.1" 301 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇴 gtheo99	2026-04-17 16:36:04 (2 months ago)	104.207.57.134 (DE/Germany/-), 2 distributed cpanel attacks on account [aavph] in the last 900 secs	SSH Brute-Force Hacking
🇫🇷 masterguru	2026-04-02 21:07:43 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.57.134 (DE/Germany/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.57.134 (DE/Germany/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇬🇧 openstrike.co.uk	2026-02-16 06:13:18 (4 months ago)	12 attacks on env grabbing URLs, password grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /.aw ... show more 12 attacks on env grabbing URLs, password grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /api/.git/config HTTP/1.1 show less	Hacking
🇳🇱 homeshowdomain.nl	2026-02-15 22:59:12 (4 months ago)	Auto-ban: >3000 req/min op 2026-02-15	Hacking Web App Attack SSH
🇬🇧 consul.to	2026-02-15 12:50:52 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 BlueWire Hosting	2026-02-15 12:18:03 (4 months ago)	Probing websites for vulnerabilities	Web App Attack
🇧🇪 madeit	2026-02-15 11:36:27 (4 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:16:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:16:23.617067 2026] [security2:error] [pid 31194:tid 31194] [client 104.207.57.134:30941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syvox.net"] [uri "/.env.production"] [unique_id "aZFktw8OMb_ZYCSVZ3VoTAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-02-15 05:58:40 (4 months ago)	Try to access /config/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:57:26 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:57:20.814755 2026] [security2:error] [pid 15089:tid 15089] [client 104.207.57.134:52931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "switkoprofiri.org"] [uri "/v2/.git/config"] [unique_id "aZFgQEPSIO5bET5F2vATyAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-15 04:50:02 (4 months ago)	Bot / scanning and/or hacking attempts: GET /admin/.env HTTP/1.1, GET /test/.git/config HTTP/1.1, GE ... show more Bot / scanning and/or hacking attempts: GET /admin/.env HTTP/1.1, GET /test/.git/config HTTP/1.1, GET /app/.env HTTP/1.1, GET /wp/.git/config HTTP/1.1, GET /v2/.git/config HTTP/1.1, GET /.aws/credentials HTTP/1.1, GET /config/.env HTTP/1.1, GET /api/.git/config HTTP/1.1, GET /new/.git/config HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.env.local HTTP/1.1, GET /app/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, HEAD / HTTP/1.1, GET /.env.save HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /backup/.git/config HTTP/1.1, GET /api/.env HTTP/1.1, GET /frontend/.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /dev/.git/config HTTP/1.1, GET /site/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:24:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:24:10.542392 2026] [security2:error] [pid 13596:tid 13596] [client 104.207.57.134:50075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stringview.com"] [uri "/.env.production"] [unique_id "aZFKauevrm3wK4YDxlLRKgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:33:24 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:33:20.048027 2026] [security2:error] [pid 7417:tid 7417] [client 104.207.57.134:60415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steambalancing.com"] [uri "/.env.save"] [unique_id "aZE-gBIQCfAbToSVEcKoygAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 00:38:29 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:38:26.757192 2026] [security2:error] [pid 30138:tid 30138] [client 104.207.57.134:30451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mouserart.com"] [uri "/api/.git/config"] [unique_id "aZEVgjs62B_uSiOAqaZh-wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 222.252.30.241

🇲🇽 187.243.192.228

🇳🇱 185.242.226.90

🇳🇱 176.65.139.181

🇺🇸 162.216.150.37

🇺🇸 162.216.150.35

🇨🇱 136.248.242.166

🇧🇬 93.183.143.107

🇫🇷 88.161.179.251

🇱🇹 45.227.254.170

🇿🇲 41.173.43.34

🇩🇪 8.209.91.89

🇳🇱 178.16.54.237

🇺🇸 167.142.55.106

🇳🇱 158.94.209.107

🇺🇸 73.232.235.0

🇺🇸 65.49.1.143

🇺🇦 46.149.191.249

🇹🇭 38.60.254.173

🇬🇧 35.203.210.59