JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.15

104.207.50.15 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.15

Whois 104.207.50.15

IP Abuse Reports for 104.207.50.15:

This IP address has been reported a total of 97 times from 18 distinct sources. 104.207.50.15 was first reported on June 4th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-01-05 20:27:54 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 02:07:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:07:10.027992 2025] [security2:error] [pid 1647140:tid 1647197] [client 104.207.50.15:34707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.learndoexplore.teritemme.com"] [uri "/.env"] [unique_id "aSUPTsWdNO_bFaD03ZYZ-QAAANM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:39:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:39:22.869979 2025] [security2:error] [pid 29207:tid 29207] [client 104.207.50.15:41049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.colodist.com"] [uri "/.git/HEAD"] [unique_id "aSUIyiXRvt0geURHK3p3DAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-25 01:36:51 (6 months ago)	Probing to gain illegal access	Web App Attack
🇩🇪 Holger	2025-11-25 01:34:17 (6 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:23:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:23:33.939258 2025] [security2:error] [pid 14779:tid 14779] [client 104.207.50.15:26115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nothotmail.org"] [uri "/.env"] [unique_id "aSUFFWDoj71MB83cP9nN2AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:48:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:48:29.411647 2025] [security2:error] [pid 30621:tid 30621] [client 104.207.50.15:44583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aktkaro.com"] [uri "/.git/HEAD"] [unique_id "aST83Tvoz4GELWrkq8oSzgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-12 12:42:54 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.11.12 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 dpinse	2025-11-08 04:21:22 (7 months ago)	teler detected Directory Bruteforce against resource /.aws/credentials from 104.207.50.15	Bad Web Bot
🇮🇩 securejdprop	2025-11-08 04:16:15 (7 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 104.207.50.15 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-08 04:16:13.884267823 +0000 UTC show less	Web App Attack
🇩🇪 cloudmax	2025-10-27 08:32:41 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2025-10-11 08:36:40 (8 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 20:26:24 (8 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 19:39:52 (8 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 190.115.84.25

🇩🇪 91.99.6.245

🇩🇪 44.169.72.160

🇹🇼 198.235.24.72

🇸🇦 188.54.166.35

🇩🇪 167.94.146.41

🇺🇸 147.182.223.21

🇨🇳 112.7.98.95

🇻🇳 103.61.44.43

🇭🇰 101.36.122.139

🇳🇱 82.39.86.153

🇷🇴 80.94.92.171

🇸🇬 2400:8901::2000:b3ff:fe41:2532

🇩🇪 195.179.230.95

🇨🇳 171.8.144.122

🇺🇸 48.214.144.31

🇺🇸 45.156.129.191

🇫🇮 45.130.127.173

🇮🇹 31.59.89.180

🇨🇴 201.184.50.251