JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.57.87

104.207.57.87 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.57.87

Whois 104.207.57.87

IP Abuse Reports for 104.207.57.87:

This IP address has been reported a total of 129 times from 13 distinct sources. 104.207.57.87 was first reported on June 4th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Cognisant-Security	2026-03-14 06:10:00 (2 months ago)	Attempts to login using invalid WordPress user	Web App Attack Hacking
Anonymous	2026-03-07 19:11:19 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2026-01-05 20:17:32 (4 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 03:54:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:54:51.752065 2025] [security2:error] [pid 11005:tid 11005] [client 104.207.57.87:12371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.retiredinternationaltravel.com"] [uri "/.env"] [unique_id "aSUoi4JJWy1CTXtE5W1vKwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:13:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:13:33.441680 2025] [security2:error] [pid 4062:tid 4062] [client 104.207.57.87:15891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vansfanz.rollinchassis.com"] [uri "/.git/HEAD"] [unique_id "aSUe3Zu5Y6pxJibUEh-5ZgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:37:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:37:41.375588 2025] [security2:error] [pid 29629:tid 29629] [client 104.207.57.87:16015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.leighcunningham.com"] [uri "/.env"] [unique_id "aSUIZU4Ood_2TbuMnplkiwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:21:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:21:10.058934 2025] [security2:error] [pid 18891:tid 18891] [client 104.207.57.87:24591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.maledon.com"] [uri "/.git/HEAD"] [unique_id "aST2dkLbnfuYk9Lni_0yvgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:54:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.57.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:54:21.318087 2025] [security2:error] [pid 21895:tid 21895] [client 104.207.57.87:18685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.centuryabsinthe.com"] [uri "/.svn/wc.db"] [unique_id "aSQPLc_kK7Nt2OCRQsHoewAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2025-11-17 08:58:27 (6 months ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-11-17 06:33:18 (6 months ago)	(From [email protected]) Multiverse AI - The Only Platform That Gives You Access To Every Top A ... show more (From [email protected]) Multiverse AI - The Only Platform That Gives You Access To Every Top AI Model — In Every Version — All Inside A Single, Beautifully Simple Dashboard. https://ai108.online/MultiverseAI ChatGPT (3.5 → 4.5 → 4o → 5 → Turbo → Nano) Gemini (1.5 Pro → 2.0 Flash) Claude (3 Opus → Sonnet → Haiku) Grok (1 through 4) DALL·E, Veo, Kling, ElevenLabs, DeepSeek, FLUX, LLaMA & more And yes — you get every future version included automatically. https://ai108.online/MultiverseAI to UNSUBSCRIBE: https://ai108.online/unsubscribe?domain=marshfieldchiro.com Address: 108 West Street Comstock Park, MI 48721 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-14 20:38:14 (6 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRI ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=miamichiro.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-11 21:41:43 (6 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITI ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=giambochiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇩🇪 Ad Ministrator	2025-10-18 23:49:20 (7 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
Anonymous	2025-10-11 05:41:50 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 19:42:26 (7 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 80.223.192.131

🇷🇴 80.94.92.171

🇩🇪 51.75.149.221

🇩🇪 84.32.10.175

🇺🇸 65.49.1.145

🇺🇸 64.62.156.101

🇫🇷 45.95.233.88

🇻🇳 27.79.45.129

🇨🇳 223.93.189.214

🇭🇰 124.156.157.91

🇨🇳 124.66.72.75

🇨🇳 118.196.34.237

🇺🇸 107.20.175.218

🇨🇳 106.75.222.86

🇻🇳 103.179.188.195

🇰🇿 85.159.25.5

🇹🇭 43.152.237.214

🇨🇳 36.106.167.51

🇩🇪 4.184.246.230

🇨🇳 220.197.78.91