JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.136

104.207.57.136 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 42%: ?

42%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.136

Whois 104.207.57.136

IP Abuse Reports for 104.207.57.136:

This IP address has been reported a total of 134 times from 23 distinct sources. 104.207.57.136 was first reported on June 22nd 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-01 21:59:05 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-31. show less	Web App Attack SSH Hacking
🇺🇸 Charlesiv	2026-05-31 00:09:12 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 200373 (3xK Tech GmbH) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 200373 (3xK Tech GmbH) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-05-30T23:02:45Z Ray ID: a0415e46ccb6b96c UA: Mozilla/5.0 (Linux; U; Android 1.5; en-gb; T-Mobile_G2_Touch Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1 show less	Bad Web Bot
🇹🇷 Detmach	2026-05-30 23:23:49 (5 days ago)	Security attack detected. Multiple failed attempts from 104.207.57.136. IP banned for 1440 minutes a ... show more Security attack detected. Multiple failed attempts from 104.207.57.136. IP banned for 1440 minutes at 31.05.2026 02:23:49. Failed attempts: 1 show less	Brute-Force
🇺🇸 mnsf	2026-05-28 22:07:09 (1 week ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 16:29:41 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:29:34.424574 2026] [security2:error] [pid 890:tid 890] [client 104.207.57.136:32389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funkerecords.com"] [uri "/.env"] [unique_id "ag3hbsWj6UzlNyInisMVpQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-05-19 21:02:56 (2 weeks ago)	dot file probe	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-18 22:00:56 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-05-18	Web App Attack SSH Hacking
🇫🇷 Thaliruth	2026-05-04 17:12:30 (1 month ago)	[04/May/2026:19:12:29.980754 +0200] afjTfVAWf4LoLYiTp-J1WQAAAIo 104.207.57.136 42186 127.0.0.1 7081 ... show more [04/May/2026:19:12:29.980754 +0200] afjTfVAWf4LoLYiTp-J1WQAAAIo 104.207.57.136 42186 127.0.0.1 7081 ... show less	Hacking
🇬🇧 poundawebsiteltd	2026-04-28 19:59:08 (1 month ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.57.136 - - [28/Apr/2026: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.57.136 - - [28/Apr/2026:20:59:05 +0100] GET /s3cmd.ini HTTP/1.1 403 3108 - Mozilla/5.0 (Linux; Android 9; Pixel 2 XL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36 show less	Web App Attack
Anonymous	2026-04-28 01:22:18 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇪🇸 librebit	2026-01-13 02:33:58 (4 months ago)	Brute force	Brute-Force
Anonymous	2026-01-05 20:13:42 (4 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇲🇹 Malta	2026-01-01 14:17:08 (5 months ago)	104.207.57.136 - - [01/Jan/2026:15:17:08 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.207.57.136 - - [01/Jan/2026:15:17:08 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	VPN IP Hacking Web App Attack
Anonymous	2025-11-27 11:59:12 (6 months ago)	Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report t ... show more Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.62.228.98

🇷🇴 80.94.92.177

🇸🇬 43.172.194.165

🇭🇰 8.217.133.144

🇮🇳 182.95.228.22

🇧🇷 179.184.160.50

🇩🇪 172.104.134.219

🇺🇸 162.216.150.13

🇫🇮 147.185.133.212

🇩🇪 69.5.169.172

🇮🇩 36.66.16.233

🇧🇪 34.156.95.210

🇬🇧 198.178.235.41

🇰🇪 197.248.159.62

🇺🇸 159.111.20.197

🇰🇭 119.15.84.199

🇷🇺 95.165.27.83

🇺🇸 66.132.172.158

🇰🇿 45.66.52.41

🇮🇩 182.253.116.213