This IP address has been reported a total of
126
times from
16 distinct
sources.
104.207.57.170 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
United States of America
with 3
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
10
times;
Bad Web Bot
3
times;
Hacking
2
times;
Brute-Force
1
time;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.207.57.170 - - [12/Oct/2026:10:22:17 +0200] "GET /./.git/config HTTP/1.1" 301 6386 "-" "Mozilla/5.0 (X11; U; Linux i686; en-us) AppleWebKit/528.5 (KHTML, like Gecko, Safari/528.5 ) lt-GtkLauncher"
...
show less
Bad Web Bot
Web App Attack
Anonymous
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ...
show moreWeb probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
[FriSep1803:09:26.5520102026][security2:error][pid2905951:tid2905996][client104.207.57.170:0]ModSecu ...
show more[FriSep1803:09:26.5520102026][security2:error][pid2905951:tid2905996][client104.207.57.170:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqyPRsTE_pxeOCnjK70Y7AAAAYs\"]
show less
[11:21] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more[11:21] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
[03:02] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more[03:02] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Attempted brute force login to web vpn 2147 time(s); last attempt for 2025.11.27 is noted in report ...
show moreAttempted brute force login to web vpn 2147 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 414 time(s); last attempt for 2025.11.18 is noted in report t ...
show moreAttempted brute force login to web vpn 414 time(s); last attempt for 2025.11.18 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report tim ...
show moreAttempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report timestamp
show less
