JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.206

104.207.50.206 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.206

Whois 104.207.50.206

IP Abuse Reports for 104.207.50.206:

This IP address has been reported a total of 127 times from 11 distinct sources. 104.207.50.206 was first reported on June 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Spiderpiggy	2026-05-22 20:15:14 (1 week ago)	Automatically reported via Blackhole honeypot on games4you.be. Attempted access to restricted endpoi ... show more Automatically reported via Blackhole honeypot on games4you.be. Attempted access to restricted endpoint: /wp-login.php show less	Brute-Force Bad Web Bot SSH
🇫🇷 masterguru	2026-04-06 00:47:23 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.50.206 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.50.206 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-03-20 18:26:55 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:12:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:11:56.937926 2025] [security2:error] [pid 31206:tid 31206] [client 104.207.50.206:53407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hangrypandas.com"] [uri "/.env"] [unique_id "aSbSbMeJiNWrs3Z8C2RY2QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:01:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:00:56.474448 2025] [security2:error] [pid 14376:tid 14376] [client 104.207.50.206:59999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kirt.us"] [uri "/.git/HEAD"] [unique_id "aSbByGoCug2s_-kfCJg4dwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:08:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:08:44.810802 2025] [security2:error] [pid 5647:tid 5647] [client 104.207.50.206:26865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.porcherllc.internet-brochures.com"] [uri "/.env"] [unique_id "aSanfLLWLmI9A7HXY1vNSQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:13:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:13:04.216704 2025] [security2:error] [pid 5714:tid 5755] [client 104.207.50.206:33461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.strikeunosports.com"] [uri "/.env"] [unique_id "aSZUIJ1DbV1MPBadQiJSrQAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:38:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:37:57.315538 2025] [security2:error] [pid 16029:tid 16029] [client 104.207.50.206:32281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tablerockfriends.com"] [uri "/.svn/wc.db"] [unique_id "aSZL5bLPKHweXs612_5u0AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:59:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:59:50.159763 2025] [security2:error] [pid 3498162:tid 3498162] [client 104.207.50.206:16863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.understory.us"] [uri "/.git/HEAD"] [unique_id "aSQQdsluUNoi_ltRs28fKwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-10-27 04:08:08 (7 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
Anonymous	2025-10-19 17:09:59 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 01:58:57 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 22:47:42 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.17 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 08:07:26 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 01:21:59 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.92

🇨🇳 182.92.151.34

🇨🇴 181.204.234.54

🇨🇳 122.4.54.80

🇨🇳 61.136.212.140

🇨🇦 51.79.99.235

🇺🇸 20.118.216.147

🇺🇸 2602:80d:1008::8c

🇬🇧 185.91.69.77

🇺🇸 162.220.232.48

🇺🇸 131.153.52.76

🇨🇳 115.190.197.74

🇮🇹 79.56.94.83

🇧🇪 198.235.24.201

🇬🇧 198.178.235.35

🇷🇴 193.32.162.13

🇮🇹 93.92.77.127

🇺🇸 67.205.180.104

🇺🇸 47.253.138.112

🇦🇺 1.159.28.174