JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.217

104.207.57.217 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.217

Whois 104.207.57.217

IP Abuse Reports for 104.207.57.217:

This IP address has been reported a total of 146 times from 25 distinct sources. 104.207.57.217 was first reported on June 5th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Anytech	2026-02-15 10:59:47 (3 months ago)	CrowdSec detected: crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:59:43 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:59:39.907889 2026] [security2:error] [pid 15940:tid 15940] [client 104.207.57.217:58123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarahwhitecotton.com"] [uri "/new/.git/config"] [unique_id "aZFSu5StpjdDbpRiE49vdAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:34:32 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:34:26.523473 2026] [security2:error] [pid 2472686:tid 2472686] [client 104.207.57.217:27875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sanesoftware.com"] [uri "/config/.env"] [unique_id "aZFM0sstTEc-tdfGKQx-ZQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:06:31 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:06:24.220777 2026] [security2:error] [pid 22199:tid 22231] [client 104.207.57.217:41201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "power51.com"] [uri "/app/.env"] [unique_id "aZFGQL6k6LPKjSLyJxBdWQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-15 04:05:50 (3 months ago)	Too many Status 40X (12) Scanning/Probing (12)	Brute-Force Web App Attack
🇨🇭 Origon	2026-02-15 04:02:06 (3 months ago)	http-sensitive-files - IP: 104.207.57.217 - time="2026-02-15T05:02:06+01:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 104.207.57.217 - time="2026-02-15T05:02:06+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.57.217 (DE/200373) : 4h ban on Ip 104.207.57.217" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:43:46 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:43:41.419378 2026] [security2:error] [pid 24614:tid 24614] [client 104.207.57.217:52267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portalvasco.com"] [uri "/admin/.env"] [unique_id "aZFA7QcOmIerpbQXkIjfwgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:16:10 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:16:07.122814 2026] [security2:error] [pid 17764:tid 17764] [client 104.207.57.217:30115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabras.com"] [uri "/app/.env"] [unique_id "aZE6d8PQZhctDB1R4rZ4pAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 02:42:00 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:41:52.975135 2026] [security2:error] [pid 9356:tid 9356] [client 104.207.57.217:39753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "russellzone.com"] [uri "/app/.env"] [unique_id "aZEycP9nTPt3sHH7vWkFfwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-02-15 01:35:18 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /site/.git/config UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-15 01:35:11 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:35:07.970600 2026] [security2:error] [pid 1113323:tid 1113323] [client 104.207.57.217:43393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pineywoodsrcd.org"] [uri "/.git/config"] [unique_id "aZEiy9jUPma_lS_6ahEdmgAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-02-15 01:13:18 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 00:53:24 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:53:20.189489 2026] [security2:error] [pid 29752:tid 29752] [client 104.207.57.217:40219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nashes.net"] [uri "/.env"] [unique_id "aZEZAEuemfS6cTJWM1USVgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-05 20:15:20 (4 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-14 13:20:07 (5 months ago)	botnet	DDoS Attack

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.104.79.191

🇺🇸 207.90.244.21

🇺🇸 207.90.244.10

🇦🇫 203.171.106.171

🇰🇿 145.255.160.126

🇺🇸 137.184.228.138

🇰🇿 93.157.177.202

🇰🇿 89.40.192.79

🇺🇿 188.113.246.152

🇳🇱 185.224.128.16

🇰🇿 176.64.5.135

🇺🇸 162.216.150.79

🇩🇪 130.12.181.106

🇨🇳 117.44.84.110

🇨🇳 113.3.150.145

🇧🇩 103.166.59.150

🇵🇰 103.82.121.231

🇰🇿 92.55.172.82

🇪🇸 87.124.179.178

🇰🇿 85.193.115.216