JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.21

104.207.57.21 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 50%: ?

50%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.21

Whois 104.207.57.21

IP Abuse Reports for 104.207.57.21:

This IP address has been reported a total of 88 times from 26 distinct sources. 104.207.57.21 was first reported on June 5th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-06-14 10:35:33 (1 hour ago)	(y4) Failed scan -byebye- from 104.207.57.21 (DE/Germany/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-06-14 06:30:37 (5 hours ago)	104.207.57.21 - - [14/Jun/2026:08:30:37 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 104.207.57.21 - - [14/Jun/2026:08:30:37 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇲🇽 octageeks.com	2026-06-14 04:21:55 (7 hours ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇬🇷 setupgr	2026-06-13 12:06:42 (1 day ago)	(mod_security) mod_security (id:900001) triggered by 104.207.57.21: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:900001) triggered by 104.207.57.21: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 15:06:41.638505 2026] [security2:error] [pid 784556:tid 784758] [client 104.207.57.21:30423] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ai1H0c63WyfM5i32ramhVAAAARE"], referer: https://villa-izabela.com/wp-login.php show less	Port Scan
Anonymous	2026-06-13 03:20:04 (1 day ago)	Web attack blocked by Wordfence on 1valkenburg.nl (1 hit). Reported by CRMON.	Web App Attack
🇺🇸 mnsf	2026-06-10 20:05:58 (3 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
Anonymous	2026-06-03 13:15:33 (1 week ago)	WordPress Brute Force	Brute-Force
🇺🇸 lostswordfish.com	2026-05-31 12:32:04 (1 week ago)	Wordfence waf block on fypeducation	Web App Attack
🇲🇽 octageeks.com	2026-05-30 04:14:58 (2 weeks ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
Anonymous	2026-05-29 02:35:38 (2 weeks ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=weihnachtsbasar-athen.gr; logs=/var/log/httpd/domains/w ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=weihnachtsbasar-athen.gr; logs=/var/log/httpd/domains/weihnachtsbasar-athen.gr.log; samples=site_wide=true \| distinct_ips=16 \| /wp-login.php show less	Hacking Web App Attack
Anonymous	2026-02-11 09:01:00 (4 months ago)	SMS pumping	DDoS Attack VPN IP Bad Web Bot Web App Attack
Anonymous	2026-02-09 21:56:26 (4 months ago)	104.207.57.21 - - [09/Feb/2026:21:56:07 +0000] "GET /admin/.git/config HTTP/1.1" 302 645 "-" "Mozill ... show more 104.207.57.21 - - [09/Feb/2026:21:56:07 +0000] "GET /admin/.git/config HTTP/1.1" 302 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 16:27:20 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.21 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 11:27:12.472116 2026] [security2:error] [pid 1170313:tid 1170313] [client 104.207.57.21:47473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftiptondds.com"] [uri "/.env.production"] [unique_id "aYoK4KQSApXctR5bbiq_ogAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 F242	2026-01-30 05:54:34 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:26:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.21 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:25:52.805721 2025] [security2:error] [pid 775:tid 775] [client 104.207.57.21:28941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "designingdestinynow.com"] [uri "/.svn/wc.db"] [unique_id "aSUhwAU3m-CFw7Bf0hiYcwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 171.113.147.189

🇺🇸 162.216.150.202

🇨🇳 113.121.114.204

🇺🇸 65.49.1.96

🇩🇪 45.86.202.135

🇰🇷 14.63.196.175

🇬🇧 2a0a:ef40:1b56:f01:ac44:de51:ddd:b090

🇵🇭 222.127.48.44

🇳🇱 192.142.28.77

🇫🇮 178.20.210.208

🇧🇷 177.8.251.139

🇫🇮 147.185.133.171

🇫🇷 85.217.140.16

🇯🇵 54.250.147.195

🇧🇷 45.205.1.240

🇮🇷 5.233.89.92

🇩🇪 213.209.159.242

🇺🇸 162.40.204.225

🇮🇩 103.151.140.97

🇩🇪 92.209.185.73