JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.2

104.207.56.2 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.2

Whois 104.207.56.2

IP Abuse Reports for 104.207.56.2:

This IP address has been reported a total of 90 times from 16 distinct sources. 104.207.56.2 was first reported on June 11th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-02-21 21:59:30 (3 months ago)	Fail2Ban banned 104.207.56.2 for security violations in jail wp-armour. Log: 2026/02/21 21:59:30 [er ... show more Fail2Ban banned 104.207.56.2 for security violations in jail wp-armour. Log: 2026/02/21 21:59:30 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.56.2 \| Target: wplogin" , client: 104.207.56.2, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 myagent.site	2026-01-20 08:26:44 (4 months ago)	Blocking for trying to access an exploit file: //installer.php	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:09 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-09 09:57:46 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 04:57:40.119989 2025] [security2:error] [pid 9791:tid 9791] [client 104.207.56.2:56493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seoanalyticslocal.com"] [uri "/.git/HEAD"] [unique_id "aTfylAtzhVHpzS9FyUHGuQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 08:40:41 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 03:40:38.230123 2025] [security2:error] [pid 5809:tid 5809] [client 104.207.56.2:37205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sigridsnaturalfoods.com"] [uri "/.env"] [unique_id "aTaPBopjrSmE_-qcZ6TptgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 16:19:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:19:24.548966 2025] [security2:error] [pid 1675:tid 1675] [client 104.207.56.2:20009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynetteharris.net"] [uri "/.env"] [unique_id "aTRXjBvq8me5hE1wE7alngAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 08:55:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:55:16.494742 2025] [security2:error] [pid 25369:tid 25369] [client 104.207.56.2:17361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehiddengemmalta.com"] [uri "/.git/HEAD"] [unique_id "aTKd9N7nrf-oC_JZDM-MkgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 02:41:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:40:56.329253 2025] [security2:error] [pid 26874:tid 26874] [client 104.207.56.2:32505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teleplussolutions.com"] [uri "/.env"] [unique_id "aTJGOGjuJN7BOZUG8xibbwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-12 09:28:56 (6 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.11.12 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-11 07:02:41 (7 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 21:33:09 (7 months ago)	Attempted brute force login to web vpn 181 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 181 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 19:32:04 (7 months ago)	Attempted brute force login to web vpn 198 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 198 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 23:09:42 (7 months ago)	Attempted brute force login to web vpn 270 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 270 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:46:26 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 15:57:04 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 203.161.54.251

🇧🇷 200.229.166.91

🇩🇪 154.43.57.47

🇨🇳 116.140.75.136

🇺🇸 93.152.208.38

🇨🇳 222.170.175.95

🇲🇽 201.140.116.7

🇦🇷 181.47.9.103

🇺🇸 176.65.139.249

🇳🇱 176.65.139.32

🇩🇪 165.232.125.188

🇫🇮 147.185.133.117

🇱🇹 141.98.11.83

🇯🇵 66.235.104.146

🇺🇸 66.132.172.179

🇺🇸 47.251.70.145

🇻🇳 45.119.212.99

🇮🇳 45.117.215.143

🇸🇳 41.208.147.131

🇬🇧 35.203.211.124