JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.236

104.207.57.236 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.236

Whois 104.207.57.236

IP Abuse Reports for 104.207.57.236:

This IP address has been reported a total of 109 times from 16 distinct sources. 104.207.57.236 was first reported on June 19th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 [email protected]	2026-06-05 00:00:45 (5 days ago)	104.207.57.236 - - [05/Jun/2026:00:00:43 +0000] "POST /xmlrpc.php HTTP/1.1" 404 326 "-" "curl/8.6.0" ... show more 104.207.57.236 - - [05/Jun/2026:00:00:43 +0000] "POST /xmlrpc.php HTTP/1.1" 404 326 "-" "curl/8.6.0" 104.207.57.236 - - [05/Jun/2026:00:00:44 +0000] "POST /xmlrpc.php HTTP/1.1" 404 326 "-" "Wget/1.21.4" 104.207.57.236 - - [05/Jun/2026:00:00:44 +0000] "POST /xmlrpc.php HTTP/1.1" 404 326 "-" "curl/8.6.0" ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-04-15 15:24:12 (1 month ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:58:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:58:52.438173 2026] [security2:error] [pid 24787:tid 24787] [client 104.207.57.236:51141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furbabieslivesmatter.com"] [uri "/.git/config"] [unique_id "aYogXOhNASJ5VyCF7fXreQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:17:21 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:17:13.143440 2026] [security2:error] [pid 14550:tid 14550] [client 104.207.57.236:45947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fulltime-life.com"] [uri "/api/.git/config"] [unique_id "aYoWmYj2GbwiYTTBOS-XSgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 16:31:49 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 11:31:42.064023 2026] [security2:error] [pid 1724:tid 1724] [client 104.207.57.236:55887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftwwx.com"] [uri "/api/.env"] [unique_id "aYoL7m-TJhFePUTRJNoojAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 12:26:22 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 07:26:15.066520 2026] [security2:error] [pid 19338:tid 19391] [client 104.207.57.236:51643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gamecrazy.us"] [uri "/admin/.git/config"] [unique_id "aYnSZ4WE2kxo01YgpUqDiQAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 10:33:23 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:33:19.178434 2026] [security2:error] [pid 25199:tid 25199] [client 104.207.57.236:50159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaeltv.com"] [uri "/frontend/.env"] [unique_id "aYm37zhKE0bYMURUnUsfDgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-05 20:26:37 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:43 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-21 22:07:11 (5 months ago)	Attempted brute force login to web vpn 216 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 216 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:56:20 (5 months ago)	Attempted brute force login to web vpn 163 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 163 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-02 12:52:27 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-04 09:23:53 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.57.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 04:23:45.529011 2025] [security2:error] [pid 22991:tid 22991] [client 104.207.57.236:17173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marklex.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marklex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQnGIbSaP-EWZDV31wCdCQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2025-11-02 19:14:23 (7 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇫🇷 applemooz	2025-11-01 12:09:28 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 185.166.216.210

🇺🇸 172.238.188.122

🇺🇸 172.203.245.156

🇻🇳 103.216.117.118

🇧🇷 45.184.68.82

🇨🇳 223.109.142.55

🇺🇸 205.210.31.51

🇺🇸 205.210.31.39

🇧🇷 200.115.103.243

🇧🇷 200.115.100.114

🇹🇳 196.238.14.145

🇺🇸 195.184.76.0

🇺🇸 184.105.247.254

🇱🇹 81.30.98.142

🇭🇰 45.142.154.98

🇧🇷 205.210.31.226

🇺🇸 205.210.31.35

🇧🇷 200.115.103.138

🇮🇳 125.16.27.190

🇺🇸 100.28.153.226