JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.116

104.207.50.116 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.116

Whois 104.207.50.116

IP Abuse Reports for 104.207.50.116:

This IP address has been reported a total of 124 times from 14 distinct sources. 104.207.50.116 was first reported on June 6th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-04-15 07:45:09 (2 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-04-15 06:45:08 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 06:07:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:07:31.645042 2025] [security2:error] [pid 12982:tid 12982] [client 104.207.50.116:15785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.teknna.com"] [uri "/.env"] [unique_id "aSaZI8SgU1LZGpnv6iFVcgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:19:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:19:14.739508 2025] [security2:error] [pid 10362:tid 10362] [client 104.207.50.116:15897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jbservicesinc.net"] [uri "/.git/HEAD"] [unique_id "aSZxslv9rtcnBqjfsPQjDgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:22:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:22:07.673382 2025] [security2:error] [pid 2126:tid 2126] [client 104.207.50.116:44391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sinobit.org"] [uri "/.svn/wc.db"] [unique_id "aSZkT3pIF5PZ8QLF5iBkXAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:12:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:12:45.783540 2025] [security2:error] [pid 26721:tid 26721] [client 104.207.50.116:10353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sarahingber.com"] [uri "/.git/HEAD"] [unique_id "aSZUDWzNk-oDHLL8TA2VcwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 18:26:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 13:26:12.279324 2025] [security2:error] [pid 25219:tid 25219] [client 104.207.50.116:28577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.discountbirthannouncements.com"] [uri "/.env"] [unique_id "aSNRxHc21xrWtZrVm1j6ogAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2025-10-16 02:24:25 (8 months ago)	Form spam	Web Spam
Anonymous	2025-04-07 07:51:26 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 17:12:35 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 18:52:18 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2025-04-04 02:55:56 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-04-03 18:02:44 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
🇵🇱 sefinek.net	2025-04-03 18:00:07 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 200373 (DREI ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/1.1 (GET method) Timestamp: 2025-04-03T17:53:27Z UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-04-02 12:46:33 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.190.170.73

🇰🇷 175.201.52.8

🇫🇮 147.185.133.118

🇨🇳 123.7.178.138

🇸🇬 112.140.187.102

🇯🇵 47.79.32.184

🇳🇱 45.142.193.125

🇮🇩 36.93.81.146

🇭🇰 220.246.42.217

🇬🇧 217.146.80.126

🇺🇸 216.218.206.69

🇹🇼 198.235.24.96

🇹🇼 198.235.24.37

🇹🇳 197.5.145.150

🇧🇷 191.37.176.74

🇷🇺 178.185.136.57

🇰🇿 178.88.111.97

🇬🇧 172.237.118.226

🇺🇸 162.216.150.192

🇵🇭 113.19.183.59