JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.197

104.207.50.197 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.197

Whois 104.207.50.197

IP Abuse Reports for 104.207.50.197:

This IP address has been reported a total of 125 times from 16 distinct sources. 104.207.50.197 was first reported on June 22nd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-06-10 04:42:45 (2 days ago)	(y4) Failed scan -byebye- from 104.207.50.197 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
🇱🇻 garmtech.com	2026-06-10 01:45:39 (3 days ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
Anonymous	2026-06-10 01:34:31 (3 days ago)	[osotir.org] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide ... show more [osotir.org] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide=true \| distinct_ips=24 \| /wp-login.php show less	Hacking Web App Attack
🇮🇹 VHosting	2025-12-29 09:15:06 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2025-12-27 23:57:55 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇬🇧 SilverZippo	2025-12-27 21:00:25 (5 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 20:34:49 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:34:42.095345 2025] [security2:error] [pid 16010:tid 16030] [client 104.207.50.197:57381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dcmproductionsgroup.com"] [uri "/.git/HEAD"] [unique_id "aVBC4t1O7Na7SFTUCFtD8QAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 18:41:07 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:41:00.687177 2025] [security2:error] [pid 3453:tid 3469] [client 104.207.50.197:35679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wwjnd.com"] [uri "/.git/HEAD"] [unique_id "aVAoPLiLsSNnFpNlfosJrgAAAM0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 17:42:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 12:42:44.212762 2025] [security2:error] [pid 31241:tid 31241] [client 104.207.50.197:46041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tttns.com"] [uri "/.env"] [unique_id "aVAalFSuuVaIUNVX1lv8KgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 17:24:40 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 12:24:36.437952 2025] [security2:error] [pid 3560:tid 3560] [client 104.207.50.197:10565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "champions-in-arms.com"] [uri "/.env"] [unique_id "aVAWVOkLX7HachUQkLfP3AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 23:10:32 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.50.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 18:10:24.531795 2025] [security2:error] [pid 7593:tid 7593] [client 104.207.50.197:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|abdulhameeds.art\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abdulhameeds.art"] [uri "/backup.sql"] [unique_id "aSor4BrQUmrZH6qPlPgFLQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-06 19:30:15 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 11:17:57 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 15:19:32 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 23:06:27 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.189.177

🇳🇱 195.178.110.30

🇧🇷 179.125.104.245

🇵🇱 178.183.125.51

🇫🇮 74.125.114.157

🇳🇱 45.198.224.138

🇧🇩 45.64.134.75

🇺🇸 44.208.112.1

🇧🇷 185.100.215.213

🇺🇸 172.253.251.116

🇺🇸 162.243.32.135

🇺🇸 162.216.18.113

🇩🇪 82.115.21.205

🇺🇸 66.132.172.252

🇨🇳 61.183.86.2

🇩🇪 43.165.4.2

🇩🇪 193.124.20.248

🇺🇸 173.199.118.73

🇩🇪 151.243.11.35

🇷🇴 80.94.92.182