JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.204

104.207.56.204 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.204

Whois 104.207.56.204

IP Abuse Reports for 104.207.56.204:

This IP address has been reported a total of 138 times from 14 distinct sources. 104.207.56.204 was first reported on June 5th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-04-05 22:39:04 (2 months ago)	3.806 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-01-05 20:02:52 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2026-01-01 14:02:09 (5 months ago)	(From [email protected]) Hi, For just $250/month, you can add a dedicated Digital Marketing ... show more (From [email protected]) Hi, For just $250/month, you can add a dedicated Digital Marketing Assistant to your team—managing SEO, ad campaigns, social media, email marketing, and daily operational tasks. The first month is free, allowing you to start without any commitment. Simply complete the form to begin. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-12-29 11:22:16 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:22:12.599897 2025] [security2:error] [pid 25629:tid 25629] [client 104.207.56.204:23803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginians.com"] [uri "/.svn/wc.db"] [unique_id "aVJkZElyLzKZVXBJq34aXgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:36:33 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:36:30.422122 2025] [security2:error] [pid 30154:tid 30154] [client 104.207.56.204:49297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aislingstudiossligo.com"] [uri "/.svn/wc.db"] [unique_id "aVI9juZxL7pM8pCa7RjxGAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:03:35 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:03:27.506538 2025] [security2:error] [pid 9721:tid 9721] [client 104.207.56.204:35725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "groomattheinn.com"] [uri "/.svn/wc.db"] [unique_id "aVI1z0DLbpjjPsBsW2HvQwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:49:48 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:49:40.803903 2025] [security2:error] [pid 26033:tid 26033] [client 104.207.56.204:11627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbcconsult.com"] [uri "/.svn/wc.db"] [unique_id "aVIIZHqdP0LwXF-cP1a_IwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2025-12-29 02:33:11 (5 months ago)	Brute force	Brute-Force
Anonymous	2025-12-21 12:56:28 (5 months ago)	Attempted brute force login to web vpn 325 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 325 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:45:24 (5 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-01 23:58:35 (6 months ago)	Attempted brute force login to web vpn 918 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 918 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:57:21 (6 months ago)	Attempted brute force login to web vpn 957 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 957 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:04:34 (6 months ago)	Attempted brute force login to web vpn 2379 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2379 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 10:13:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:13:29.686027 2025] [security2:error] [pid 8862:tid 8862] [client 104.207.56.204:13269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.burnshieldmena.com"] [uri "/.env"] [unique_id "aSbSyWhXlq8OtZq9PhtEgAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 31.14.254.6

🇮🇳 2409:40e4:3d:3007:50fe:28c:1679:6a34

🇭🇰 220.246.66.209

🇩🇪 213.209.159.11

🇮🇩 195.88.211.210

🇺🇸 194.104.11.99

🇧🇷 191.241.76.128

🇺🇸 158.120.42.97

🇩🇪 151.243.11.37

🇫🇮 147.185.133.248

🇵🇰 139.135.45.190

🇨🇳 116.255.215.168

🇮🇳 106.219.120.56

🇳🇱 81.19.216.77

🇫🇮 65.108.149.206

🇨🇳 60.173.124.59

🇺🇸 45.156.129.153

🇺🇸 216.25.89.145

🇺🇸 205.210.31.64

🇩🇪 185.132.46.233