JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.39

104.207.57.39 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.39

Whois 104.207.57.39

IP Abuse Reports for 104.207.57.39:

This IP address has been reported a total of 131 times from 15 distinct sources. 104.207.57.39 was first reported on June 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-04-18 11:15:09 (1 month ago)	[Sat Apr 18 13:15:09.462739 2026] [authz_core:error] [pid 560721:tid 560739] [remote 104.207.57.39:3 ... show more [Sat Apr 18 13:15:09.462739 2026] [authz_core:error] [pid 560721:tid 560739] [remote 104.207.57.39:36795] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇳🇿 Antinson	2026-04-03 17:59:07 (2 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇪🇸 10dencehispahard SL	2026-01-23 07:37:40 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇮🇹 VHosting	2025-12-24 05:20:18 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-21 20:16:38 (5 months ago)	Attempted brute force login to web vpn 270 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 270 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:04:10 (5 months ago)	Attempted brute force login to web vpn 181 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 181 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (5 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-12-01 23:52:14 (6 months ago)	Attempted brute force login to web vpn 902 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 902 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:50:23 (6 months ago)	Attempted brute force login to web vpn 903 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 903 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:30:41 (6 months ago)	Attempted brute force login to web vpn 2361 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2361 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 06:57:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:57:14.399683 2025] [security2:error] [pid 25792:tid 25792] [client 104.207.57.39:53993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.allisonstiles.org"] [uri "/.env"] [unique_id "aSakyvKHuMVLX_2EVs663wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:28:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:28:19.067994 2025] [security2:error] [pid 23357:tid 23357] [client 104.207.57.39:39913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.indyham.com"] [uri "/.git/HEAD"] [unique_id "aSaeA3MG2eG8J5FpTdIgIAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:25:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:25:20.501916 2025] [security2:error] [pid 3538472:tid 3538584] [client 104.207.57.39:29873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.expozium.com"] [uri "/.svn/wc.db"] [unique_id "aSaPQOI4WXb68rdDW0NbIAAAAY8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:33:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:33:46.855120 2025] [security2:error] [pid 29767:tid 29782] [client 104.207.57.39:43253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pamper.com"] [uri "/.git/HEAD"] [unique_id "aSUjmu2PFPX_dStrHN9dCQAAAQA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇺🇸 198.46.166.149

🇰🇪 197.248.8.33

🇨🇳 180.95.238.33

🇨🇳 124.117.195.121

🇮🇳 122.177.246.203

🇷🇴 92.223.15.15

🇷🇴 80.94.95.242

🇺🇸 64.94.159.252

🇧🇷 45.234.214.83

🇬🇧 35.203.211.214

🇨🇳 221.229.220.180

🇧🇷 201.74.226.243

🇳🇱 185.223.235.13

🇮🇳 103.180.212.135

🇫🇷 86.217.21.47

🇨🇦 54.39.192.183

🇺🇸 50.184.90.89

🇷🇺 46.188.119.26

🇺🇸 43.153.96.79