This IP address has been reported a total of
131
times from
19 distinct
sources.
104.207.57.235 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
[FriMay2221:51:57.5752242026][security2:error][pid2478585:tid2478596][client104.207.57.235:0]ModSecu ...
show more[FriMay2221:51:57.5752242026][security2:error][pid2478585:tid2478596][client104.207.57.235:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(127\\\\\\\\.0\\\\\\\\.0\\\\\\\\.1\|localhost\|0\\\\\\\\.0\\\\\\\\.0\\\\\\\\.0\|169\\\\\\\\.254\\\\\\\\.169\\\\\\\\.254\)\"atARGS:pwd.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"20\"][id\"990003\"][msg\"PossibleSSRF/internalhostaccessattempt\"][hostname\"benvenutialfood.biz\"][uri\"/wp-login.php\"][unique_id\"ahCz3Wdk9X6B-0k2LLlzoQAAAQk\"]\,referer:https://benvenutialfood.biz/wp-login.php
show less
Fail2Ban banned 104.207.57.235 for security violations in jail nginx-aggressive. Log: 2026/03/09 22: ...
show moreFail2Ban banned 104.207.57.235 for security violations in jail nginx-aggressive. Log: 2026/03/09 22:32:23 [error] FastCGI sent in stderr: "Primary script unknown" , client: 104.207.57.235, server: [REDACTED], request: "POST /wp-admin/xmlrpc.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED]
2026/03/09 22:32:23 [error] FastCGI sent in stderr: "Primary script unknown" , client: 104.207.57.235, server: [REDACTED], request: "POST /wp-admin/xmlrpc.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED]
...
show less
Bad Web Bot
Web App Attack
Anonymous
Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report ti ...
show moreAttempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report timestamp
show less
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.57.235 (DE/Germany/-): 2 in ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.57.235 (DE/Germany/-): 2 in the last 3600 secs
show less
(mod_security) mod_security (id:210492) triggered by 104.207.57.235 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:210492) triggered by 104.207.57.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:00:36.496341 2025] [security2:error] [pid 1687416:tid 1687445] [client 104.207.57.235:21425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aclarityforensics.com"] [uri "/.git/HEAD"] [unique_id "aSif1AZGM56OFrhiftJPnQAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report t ...
show moreAttempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 11/24/2025 2:15 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
Showing 1 to
15
of 131 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩