JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.125

104.207.50.125 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.125

Whois 104.207.50.125

IP Abuse Reports for 104.207.50.125:

This IP address has been reported a total of 138 times from 17 distinct sources. 104.207.50.125 was first reported on June 7th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-20 04:55:12 (4 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-05-20 02:13:58 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-27 15:04:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 10:04:12.922722 2025] [security2:error] [pid 10134:tid 10134] [client 104.207.50.125:11159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rabar.net"] [uri "/.env"] [unique_id "aShobNlMH5NpGPtdfezZLAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Asimar	2025-11-27 11:40:45 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 104.207.50.125 (GB/United Kingdom/-): ... show more (mod_security) mod_security triggered on hostname [redacted] 104.207.50.125 (GB/United Kingdom/-): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2025-11-25 06:16:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:16:20.526960 2025] [security2:error] [pid 13754:tid 13764] [client 104.207.50.125:9667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.terraverde.us"] [uri "/.git/HEAD"] [unique_id "aSVJtKITODRS1uMOGv85MgAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:28:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:27:57.074031 2025] [security2:error] [pid 9013:tid 9013] [client 104.207.50.125:9885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jordanware.com"] [uri "/.svn/wc.db"] [unique_id "aSU-XSuYUCBk1rpiKDD6nQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:15:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:15:18.465073 2025] [security2:error] [pid 20910:tid 20910] [client 104.207.50.125:12195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.romancewritersfoundation.org"] [uri "/.git/HEAD"] [unique_id "aSUtVn3l-7ULHw4mudtvTAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:53:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:53:08.846878 2025] [security2:error] [pid 22162:tid 22162] [client 104.207.50.125:51995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fractalsky.com"] [uri "/.env"] [unique_id "aSUoJOusZ-SlziuWfwEr1gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:36:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:36:41.251791 2025] [security2:error] [pid 5238:tid 5238] [client 104.207.50.125:29755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michellerosekennedy.com"] [uri "/.env"] [unique_id "aSUkSUBL29Xjg-C2JSbR3gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:43:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:43:02.243715 2025] [security2:error] [pid 4018:tid 4018] [client 104.207.50.125:24549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.brunerpamela.com"] [uri "/.env"] [unique_id "aSUXtt3h8_y2vWY1feBBmgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:57:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:57:27.016007 2025] [security2:error] [pid 16346:tid 16346] [client 104.207.50.125:55277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.strippolefitness.com"] [uri "/.svn/wc.db"] [unique_id "aSUNB9HYVSYNNmDMbJL7YwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:35:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:35:46.874708 2025] [security2:error] [pid 31211:tid 31211] [client 104.207.50.125:28843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.americaskitchencoach.com"] [uri "/.git/HEAD"] [unique_id "aSUH8sJF02smWBK6ru-MZAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:10:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:09:57.663147 2025] [security2:error] [pid 27646:tid 27646] [client 104.207.50.125:54973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.divingmachines.com"] [uri "/.env"] [unique_id "aSUB5RyyJ4ZuSVfk7DykfAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:55:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:54:53.189474 2025] [security2:error] [pid 26995:tid 26995] [client 104.207.50.125:44077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.comitedelafamille.org"] [uri "/.git/HEAD"] [unique_id "aST-XYrmRFSn18jIAfNNDwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-06 16:02:21 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.227.31.187

🇧🇷 177.19.145.25

🇲🇦 81.192.138.65

🇷🇴 80.94.92.184

🇮🇳 49.36.24.15

🇳🇱 45.153.34.16

🇺🇸 43.153.57.122

🇷🇺 185.201.88.197

🇭🇰 152.32.214.226

🇺🇸 147.185.132.210

🇫🇷 158.220.105.179

🇺🇸 152.32.205.206

🇳🇬 102.88.137.213

🇺🇸 74.7.241.31

🇺🇸 54.87.100.227

🇺🇸 18.232.146.208

🇺🇸 3.87.27.156

🇵🇾 186.158.200.225

🇧🇼 168.167.228.74

🇱🇹 141.98.11.224