JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.50.80

104.207.50.80 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.50.80

Whois 104.207.50.80

IP Abuse Reports for 104.207.50.80:

This IP address has been reported a total of 161 times from 23 distinct sources. 104.207.50.80 was first reported on June 5th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-02-22 20:43:24 (3 months ago)	Fail2Ban banned 104.207.50.80 for security violations in jail wp-armour. Log: 2026/02/22 20:43:23 [e ... show more Fail2Ban banned 104.207.50.80 for security violations in jail wp-armour. Log: 2026/02/22 20:43:23 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.50.80 \| Target: wplogin" , client: 104.207.50.80, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇩🇪 stinpriza	2026-02-20 09:12:51 (3 months ago)	Web App Attack	Web App Attack
🇦🇺 oncord	2026-01-26 06:17:19 (4 months ago)	Form spam	Web Spam
Anonymous	2026-01-05 20:28:33 (4 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:56 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇪🇸 10dencehispahard SL	2025-12-29 09:20:10 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇵🇱 sefinek.net	2025-12-26 19:27:52 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-12-21 20:44:45 (5 months ago)	Attempted brute force login to web vpn 180 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 180 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:22:55 (5 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 oncord	2025-12-11 06:58:06 (5 months ago)	Form spam	Web Spam
🇩🇪 stinpriza	2025-12-10 19:15:23 (5 months ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2025-12-03 16:43:10 (6 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:20:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:20:05.569841 2025] [security2:error] [pid 28422:tid 28503] [client 104.207.50.80:41155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freelipink.com"] [uri "/.svn/wc.db"] [unique_id "aS9mFWQYvnwMp04GY6-akAAAAdY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:11:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:11:36.445541 2025] [security2:error] [pid 28876:tid 28876] [client 104.207.50.80:43601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "printedpartynapkins.com"] [uri "/.svn/wc.db"] [unique_id "aS51CJe-5kiuekFb0KNvOAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:41:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.50.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.50.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:41:00.544267 2025] [security2:error] [pid 24398:tid 24398] [client 104.207.50.80:52653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrismonty.com"] [uri "/.svn/wc.db"] [unique_id "aS5t3HsP_IqMPAVET2CaFgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇨🇭 209.99.189.177

🇺🇸 185.98.169.59

🇺🇸 172.253.251.112

🇫🇮 147.185.133.169

🇹🇷 89.252.131.17

🇰🇷 59.24.133.197

🇬🇧 35.203.211.127

🇮🇳 14.96.134.82

🇧🇷 200.146.215.92

🇪🇬 197.44.15.210

🇧🇷 177.11.110.179

🇳🇱 173.194.170.118

🇭🇰 165.154.41.182

🇫🇮 147.185.133.195

🇱🇹 141.98.10.170

🇵🇭 120.29.68.18

🇮🇳 103.190.91.101

🇷🇴 92.118.39.203

🇺🇸 73.140.28.86