JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.154

104.207.57.154 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.154

Whois 104.207.57.154

IP Abuse Reports for 104.207.57.154:

This IP address has been reported a total of 131 times from 20 distinct sources. 104.207.57.154 was first reported on June 11th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-05-31 07:49:07 (6 days ago)	(y4) Failed scan -byebye- from 104.207.57.154 (DE/Germany/-): (CF_ENABLE)	Hacking
🇲🇽 octageeks.com	2026-05-26 04:18:36 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-05-23 15:31:42 (1 week ago)	104.207.57.154 - - [23/May/2026:17:31:41 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 104.207.57.154 - - [23/May/2026:17:31:41 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 georgengelmann	2026-05-22 04:34:59 (2 weeks ago)	Failed login attempt for adm	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:14:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:14:36.630320 2025] [security2:error] [pid 29118:tid 29118] [client 104.207.57.154:31463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.davisllp.com"] [uri "/.env"] [unique_id "aSaazC9dgOq0hnAfiNU-sQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:00:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:00:12.953441 2025] [security2:error] [pid 23038:tid 23038] [client 104.207.57.154:33217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.krislajeskiedesign.com"] [uri "/.env"] [unique_id "aSZfLLZ_PZUvrhmRecTjhgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:26:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:26:32.040334 2025] [security2:error] [pid 32003:tid 32007] [client 104.207.57.154:44449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tkfay.com"] [uri "/.env"] [unique_id "aSZJODKMur_mjuXzQQ9CBwAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 00:27:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:16:35.268443 2025] [security2:error] [pid 21684:tid 21684] [client 104.207.57.154:60081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.route66book.com"] [uri "/.svn/wc.db"] [unique_id "aSOj42Ozm-dvqFTA2eJ2qwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 05:56:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 00:56:24.279180 2025] [security2:error] [pid 17039:tid 17039] [client 104.207.57.154:39871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.craftcare.net"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRF-iN7KuoaB4v5XRAVHPQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2025-11-02 06:55:46 (7 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2025-11-02 03:19:03 (7 months ago)	trying wp-login.php/xmlrpc.php 33 times in 1 minutes	Brute-Force Web App Attack
Anonymous	2025-10-30 14:35:23 (7 months ago)	WordPress Brute Force	Brute-Force
🇩🇪 Marc	2025-10-29 21:58:04 (7 months ago)		Brute-Force
🇺🇸 mind5t0rm	2025-10-18 15:54:20 (7 months ago)	(WPLOGIN) WP Login Attack 104.207.57.154 (DE/Germany/-): 3 in the last 3600 secs; Ports: ; Directio ... show more (WPLOGIN) WP Login Attack 104.207.57.154 (DE/Germany/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 104.207.57.154 - - [18/Oct/2025:22:54:03 +0700] "GET /wp-login.php HTTP/1.1" 200 3029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 104.207.57.154 - - [18/Oct/2025:22:54:13 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/1.1" 200 2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 104.207.57.154 - - [18/Oct/2025:22:54:19 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/1.1" 200 3251 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	Port Scan
Anonymous	2025-10-11 07:30:12 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.84.100.196

🇨🇳 43.142.45.10

🇨🇳 182.121.113.57

🇺🇸 167.99.106.254

🇸🇬 152.42.240.74

🇫🇮 147.185.133.21

🇺🇸 34.21.50.70

🇳🇱 20.123.146.92

🇨🇳 14.103.118.153

🇨🇳 112.27.230.157

🇱🇹 81.30.98.62

🇷🇴 2.57.121.25

🇦🇺 2404:6800:4006:1002::121

🇮🇳 122.187.230.130

🇷🇺 109.248.188.232

🇧🇬 78.128.113.74

🇺🇸 216.180.246.235

🇺🇸 65.49.1.189

🇳🇱 45.148.10.240

🇳🇱 5.255.127.96