JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.19

104.207.57.19 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.19

Whois 104.207.57.19

IP Abuse Reports for 104.207.57.19:

This IP address has been reported a total of 88 times from 16 distinct sources. 104.207.57.19 was first reported on June 21st 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Peter Racine	2026-07-08 17:11:00 (19 hours ago)	Credential stuffing - exchange accounts	Brute-Force
🇮🇹 VHosting	2026-05-25 16:00:05 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-05-20 00:19:21 (1 month ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2025-12-21 12:10:19 (6 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 18:42:25 (6 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.12.19 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-11-27 03:08:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 22:08:19.581501 2025] [security2:error] [pid 11522:tid 11522] [client 104.207.57.19:43865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.robinnixon.com"] [uri "/.env"] [unique_id "aSfAo2wk4F1SahNrGEtLjwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-11-26 23:24:29 (7 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 21:13:24 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:13:13.911846 2025] [security2:error] [pid 21431:tid 21431] [client 104.207.57.19:26929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.michaelmoorefield.com"] [uri "/.env"] [unique_id "aSdtaVztxT_vLx8ED5L67wAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 16:55:04 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 11:55:00.415082 2025] [security2:error] [pid 1323:tid 1323] [client 104.207.57.19:29795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.btsalesrep.com"] [uri "/.env"] [unique_id "aScw5GTLsGrWXcE8O01RVgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:29:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:29:48.143161 2025] [security2:error] [pid 3738124:tid 3738205] [client 104.207.57.19:52713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.soulconjecture.com"] [uri "/.svn/wc.db"] [unique_id "aSbIjEu1G_QxOobZ4hrgjQAAAc0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:38:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:38:21.610726 2025] [security2:error] [pid 27999:tid 27999] [client 104.207.57.19:53495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mylitta.com"] [uri "/.git/HEAD"] [unique_id "aSVO3ZrYdyJ_i9Br0nuKUQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:35:32 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:35:29.537975 2025] [security2:error] [pid 14475:tid 14475] [client 104.207.57.19:50957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.heavenly-creatures.com"] [uri "/.env"] [unique_id "aSVAIfaeE0X-pPXFB6_Y_wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:19:10 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:19:02.527975 2025] [security2:error] [pid 14016:tid 14016] [client 104.207.57.19:50681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ceravolo.net"] [uri "/.git/HEAD"] [unique_id "aSU8RutR39-VlzA_Kucl2gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:00:30 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:00:20.001281 2025] [security2:error] [pid 5972:tid 5972] [client 104.207.57.19:15317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ferrarapanent.com"] [uri "/.svn/wc.db"] [unique_id "aSUp1P45_iSyXFziwhVCHwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.107.156.227

🇧🇷 179.97.121.97

🇹🇭 82.26.104.135

🇺🇸 70.116.193.75

🇨🇳 61.169.54.150

🇲🇾 180.74.91.50

🇹🇭 118.173.236.185

🇺🇸 107.150.105.153

🇨🇬 102.129.68.107

🇺🇸 69.249.95.66

🇺🇸 47.251.80.35

🇨🇳 27.219.152.243

🇨🇦 20.220.212.5

🇪🇹 196.190.212.169

🇮🇳 103.117.155.41

🇲🇾 60.54.126.138

🇰🇷 3.37.128.154

🇨🇳 125.119.26.39

🇹🇭 114.131.130.11

🇲🇽 187.190.35.163