JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.209

104.207.57.209 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.209

Whois 104.207.57.209

IP Abuse Reports for 104.207.57.209:

This IP address has been reported a total of 135 times from 19 distinct sources. 104.207.57.209 was first reported on June 22nd 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-03 21:29:57 (2 weeks ago)	[osotir.org] httpd-login-spray-site: sites=agonistes.gr.synathlountes; logs=/var/log/httpd/domains/a ... show more [osotir.org] httpd-login-spray-site: sites=agonistes.gr.synathlountes; logs=/var/log/httpd/domains/agonistes.gr.synathlountes.log; samples=site_wide=true \| distinct_ips=13 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 masterguru	2026-04-06 00:47:07 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.57.209 (DE/Germany/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.57.209 (DE/Germany/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-03-24 07:48:54 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2026-01-05 20:02:00 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-21 13:04:08 (5 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:57:26 (6 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-02 22:36:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:36:33.455077 2025] [security2:error] [pid 2909:tid 2909] [client 104.207.57.209:50387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bzbdesigns.com"] [uri "/.git/HEAD"] [unique_id "aS9p8ZX-9o5ESjy47OF1hQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:42:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:42:36.295484 2025] [security2:error] [pid 26731:tid 26731] [client 104.207.57.209:37497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toody.com"] [uri "/.svn/wc.db"] [unique_id "aS9BLD8IpdCb8845S7ti-wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 16:51:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 11:51:15.928653 2025] [security2:error] [pid 14134:tid 14134] [client 104.207.57.209:50599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astrologydemo.com"] [uri "/.env"] [unique_id "aS8ZA7SZd89FTTWPbGxcjQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:40:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:40:44.651745 2025] [security2:error] [pid 20625:tid 20625] [client 104.207.57.209:22417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surf-sci-eng.com"] [uri "/.git/HEAD"] [unique_id "aS573OliRhyVbI3XSMzUrwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 IRISIO	2025-10-13 07:16:35 (8 months ago)	scans/SQL injection/spam posts : 16 queries	SQL Injection Web App Attack
Anonymous	2025-10-10 03:59:23 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-04-07 04:02:31 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 18:16:22 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 21:57:05 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 209.227.244.120

🇧🇩 182.48.80.240

🇺🇸 124.198.131.39

🇨🇦 85.217.149.39

🇷🇺 79.165.88.118

🇺🇸 205.210.31.60

🇧🇪 198.235.24.197

🇺🇸 172.171.155.4

🇮🇳 103.14.120.207

🇩🇪 89.12.110.248

🇷🇴 80.94.92.178

🇳🇱 51.158.248.122

🇳🇱 45.148.10.240

🇺🇸 24.253.84.195

🇳🇱 193.124.15.177

🇵🇪 190.223.36.108

🇳🇱 160.119.71.129

🇺🇬 102.86.10.197

🇺🇸 100.51.6.16

🇫🇷 85.217.140.46