JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.151

104.207.57.151 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.151

Whois 104.207.57.151

IP Abuse Reports for 104.207.57.151:

This IP address has been reported a total of 124 times from 16 distinct sources. 104.207.57.151 was first reported on June 19th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-05-27 13:03:00 (1 week ago)	2026-05-27 @ 15:03:00 (CET) ~ Blocked for trying to access: /wp-login.php	Web App Attack
🇫🇷 tilellit.pro	2026-04-22 00:06:49 (1 month ago)	Fail2Ban banned 104.207.57.151 for security violations in jail nginx-aggressive. Log: 2026/04/22 00: ... show more Fail2Ban banned 104.207.57.151 for security violations in jail nginx-aggressive. Log: 2026/04/22 00:06:47 [error] FastCGI sent in stderr: "Primary script unknown" , client: 104.207.57.151, server: [REDACTED], request: "POST /wp-admin/xmlrpc.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED] 2026/04/22 00:06:48 [error] FastCGI sent in stderr: "Primary script unknown" , client: 104.207.57.151, server: [REDACTED], request: "POST /wp-admin/xmlrpc.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED] ... show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-04-13 17:55:54 (1 month ago)	[MonApr1319:55:25.9922292026][security2:error][pid1311238:tid1311344][client104.207.57.151:0]ModSecu ... show more [MonApr1319:55:25.9922292026][security2:error][pid1311238:tid1311344][client104.207.57.151:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"195\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"giuseppeasaro.com\"][uri\"/.env\"][unique_id\"ad0uDemTteELGGfqeGUE4wAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇹🇷 Detmach	2026-04-02 21:12:29 (2 months ago)	Security attack detected. Multiple failed attempts from 104.207.57.151. IP banned for 1440 minutes a ... show more Security attack detected. Multiple failed attempts from 104.207.57.151. IP banned for 1440 minutes at 3.04.2026 00:11:51. Failed attempts: 1 show less	Brute-Force
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-13 12:34:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:34:25.143068 2026] [security2:error] [pid 11940:tid 11940] [client 104.207.57.151:35299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isyourcompanysafe.com"] [uri "/.env"] [unique_id "aWY70UulYHq99xnfb6oWiAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-02 16:21:32 (5 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2026.01.02 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2026.01.02 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 04:38:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:39.221522 2025] [security2:error] [pid 15589:tid 15622] [client 104.207.57.151:38267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coldwave.net"] [uri "/.svn/wc.db"] [unique_id "aSUyzyIjVFKa_KFJ49h7QwAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:09:03 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:54.350891 2025] [security2:error] [pid 27786:tid 27786] [client 104.207.57.151:56383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bigbikers.net"] [uri "/.svn/wc.db"] [unique_id "aSUr1pg_tyVNjonHAzHYZAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:48:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:48:27.856438 2025] [security2:error] [pid 7714:tid 7714] [client 104.207.57.151:60615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kitebeach.deubellzebub.com"] [uri "/.svn/wc.db"] [unique_id "aSUnC5GiPLw6LtnwcxbFiQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:39:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:39:03.213143 2025] [security2:error] [pid 3782:tid 3782] [client 104.207.57.151:17585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ncparanormalresearch.com"] [uri "/.env"] [unique_id "aSUIt-vFohmCEyPEcJ0VtQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:01:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:01:50.835642 2025] [security2:error] [pid 1416453:tid 1416525] [client 104.207.57.151:20337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.classactionlawsuit.org"] [uri "/.env"] [unique_id "aSTx7k3b9nF_ETk_Bja2fgAAAk4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-05 15:44:50 (6 months ago)	wordpress-trap	Web App Attack
🇫🇷 tecnicorioja	2025-10-17 22:01:35 (7 months ago)	wp-login attack [17/Oct/2025:19:01:42	Brute-Force Web App Attack
Anonymous	2025-10-17 18:53:48 (7 months ago)	Failed Wordpress login	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.98

🇲🇿 197.219.208.38

🇺🇸 170.106.179.118

🇭🇰 123.58.213.128

🇮🇳 103.231.44.233

🇱🇹 77.90.185.17

🇮🇳 164.52.218.210

🇮🇩 163.7.4.169

🇺🇸 162.243.138.30

🇾🇪 150.228.11.9

🇺🇸 138.91.109.125

🇨🇳 106.12.6.79

🇮🇳 103.21.184.10

🇷🇺 95.174.98.68

🇮🇩 182.253.178.81

🇸🇬 165.154.29.144

🇵🇰 110.36.13.18

🇷🇴 92.118.39.236

🇪🇸 91.142.223.216

🇪🇸 90.170.47.115