JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.222

104.207.57.222 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.222

Whois 104.207.57.222

IP Abuse Reports for 104.207.57.222:

This IP address has been reported a total of 128 times from 17 distinct sources. 104.207.57.222 was first reported on June 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-05-28 22:06:27 (1 week ago)	Scanning/Probing (34)	Brute-Force Web App Attack
🇱🇻 garmtech.com	2025-11-27 13:54:58 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-54.104.207.57.222.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-54.104.207.57.222.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-11-27 13:29:52 (6 months ago)	Attempted brute force login to web vpn 1171 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 1171 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 06:36:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:36:27.177056 2025] [security2:error] [pid 17758:tid 17758] [client 104.207.57.222:31207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jitterbugswing.com"] [uri "/.svn/wc.db"] [unique_id "aSaf6yWsQVOffO-M1JL2FwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:31:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:31:06.112417 2025] [security2:error] [pid 6853:tid 6853] [client 104.207.57.222:49491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.n-vil.com"] [uri "/.svn/wc.db"] [unique_id "aSaQmr24DWkXwj78M0dEzwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:36:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:36:08.105124 2025] [security2:error] [pid 18660:tid 18660] [client 104.207.57.222:29907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.starktigers75.com"] [uri "/.git/HEAD"] [unique_id "aSZLeLd25pFEWQ-fbiNvXAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:37:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:37:37.053959 2025] [security2:error] [pid 30663:tid 30663] [client 104.207.57.222:34369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jaspercity.com"] [uri "/.env"] [unique_id "aSQnYXfSeiYepPd97vm9DAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:01:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:01:39.901124 2025] [security2:error] [pid 13278:tid 13278] [client 104.207.57.222:44263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.qed-consulting.co"] [uri "/.svn/wc.db"] [unique_id "aSQe8xJppqXMmVzMzANjBgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:17:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:17:29.510065 2025] [security2:error] [pid 27656:tid 27656] [client 104.207.57.222:58151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.morefrogs.com"] [uri "/.svn/wc.db"] [unique_id "aSPcWT4ZtXGZV3mg4-4uSAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-11-20 01:11:56 (6 months ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2025-11-19 21:31:05 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-31.104.207.57.222.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-31.104.207.57.222.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-11-18 23:15:32 (6 months ago)	Attempted brute force login to web vpn 342 time(s); last attempt for 2025.11.18 is noted in report t ... show more Attempted brute force login to web vpn 342 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-12 22:11:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 17:11:43.485854 2025] [security2:error] [pid 18475:tid 18546] [client 104.207.57.222:54135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nativeamericantimeline.philacentric.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRUGH3H2maeq4xulG-k93AAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2025-11-02 06:55:22 (7 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇩🇪 Marc	2025-10-29 18:51:33 (7 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.137

🇲🇲 103.59.163.135

🇮🇷 93.118.162.43

🇵🇱 83.168.110.175

🇩🇪 3.77.234.42

🇷🇴 2.57.121.112

🇧🇪 2001:41d0:ab01::4:0:146

🇳🇱 192.178.118.157

🇧🇩 103.183.62.1

🇿🇦 102.64.43.253

🇺🇸 91.230.168.192

🇬🇧 35.203.211.243

🇺🇸 34.197.70.90

🇧🇪 34.53.178.43

🇺🇸 20.55.99.64

🇳🇱 206.223.236.181

🇺🇸 195.184.76.24

🇻🇳 160.187.147.124

🇫🇮 147.185.133.182

🇨🇳 118.123.1.34