JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.195

104.207.50.195 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.195

Whois 104.207.50.195

IP Abuse Reports for 104.207.50.195:

This IP address has been reported a total of 128 times from 20 distinct sources. 104.207.50.195 was first reported on June 3rd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-20 04:06:39 (2 days ago)	Web App Attack	Web App Attack
🇧🇪 cmbplf	2026-05-28 22:28:12 (3 weeks ago)	1.009 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇫🇷 pm33	2026-05-23 04:39:21 (4 weeks ago)	Wordpress login attempts	Brute-Force
🇨🇭 TheCoon	2026-05-13 11:15:01 (1 month ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇩🇪 4server	2026-05-11 09:15:33 (1 month ago)	[MonMay1111:15:28.0262682026][security2:error][pid2331708:tid2331808][client104.207.50.195:0]ModSecu ... show more [MonMay1111:15:28.0262682026][security2:error][pid2331708:tid2331808][client104.207.50.195:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".db\"][severity\"ERROR\"][hostname\"pluriball.ch\"][uri\"/.svn/wc.db\"][unique_id\"agGeMAzuoXR6umxC-piWIQAAAMg\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 oncord	2026-02-27 17:48:22 (3 months ago)	Form spam	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:39 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-26 22:55:50 (6 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.11.26 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.11.26 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:52:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:52:53.219299 2025] [security2:error] [pid 27134:tid 27134] [client 104.207.50.195:20955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boyt.org"] [uri "/.git/HEAD"] [unique_id "aSQq9W36ZBvrdQ1IR23YiwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:05:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:05:47.346684 2025] [security2:error] [pid 1953:tid 1953] [client 104.207.50.195:30057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.airtechconsulting.com"] [uri "/.svn/wc.db"] [unique_id "aSQDy_bQvPa9KMe85KxM4AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:17:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:17:32.050238 2025] [security2:error] [pid 15330:tid 15330] [client 104.207.50.195:46323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.parastesh.org"] [uri "/.env"] [unique_id "aSPcXGo531sg_Rtr-_-ejAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2025-11-15 01:11:21 (7 months ago)	(mod_security) mod_security (id:949110) triggered by 104.207.50.195 (GB/United Kingdom/-): N in the ... show more (mod_security) mod_security (id:949110) triggered by 104.207.50.195 (GB/United Kingdom/-): N in the last X secs show less	Web App Attack
🇺🇸 Psycho Solutions LLC	2025-10-21 06:06:58 (8 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 10/21/2025 6:06 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2025-10-21 02:06:26 (8 months ago)	wordpress-trap	Web App Attack
🇫🇷 IRISIO	2025-10-20 08:23:54 (8 months ago)	scans/SQL injection/spam posts : 2 queries	SQL Injection Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.237

🇩🇪 193.124.20.232

🇦🇷 190.229.67.85

🇸🇪 171.25.158.80

🇺🇸 66.132.224.18

🇺🇸 52.230.250.68

🇧🇷 45.205.1.246

🇻🇳 14.248.83.33

🇺🇸 13.89.125.23

🇧🇩 182.252.92.18

🇨🇳 175.170.144.17

🇺🇸 173.239.240.168

🇳🇱 91.92.40.45

🇨🇦 85.217.149.55

🇨🇦 85.217.149.46

🇧🇬 79.124.60.146

🇺🇸 71.6.134.230

🇬🇷 46.176.64.44

🇳🇱 45.148.10.147

🇨🇳 42.180.4.166