JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.205

104.207.56.205 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.205

Whois 104.207.56.205

IP Abuse Reports for 104.207.56.205:

This IP address has been reported a total of 122 times from 12 distinct sources. 104.207.56.205 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 fleckenbase	2026-03-10 06:18:19 (2 months ago)	[Tue Mar 10 07:18:18.371495 2026] [php:notice] [pid 3380917:tid 3380917] [client 104.207.56.205:1100 ... show more [Tue Mar 10 07:18:18.371495 2026] [php:notice] [pid 3380917:tid 3380917] [client 104.207.56.205:11003] Attack: type [(5)5] from 104.207.56.205 redir to google [Tue Mar 10 07:18:19.882755 2026] [php:notice] [pid 3378922:tid 3378922] [client 104.207.56.205:10655] Attack: type [(5)5] from 104.207.56.205 redir to google ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-03-03 03:27:02 (3 months ago)	Fail2Ban banned 104.207.56.205 for security violations in jail wp-armour. Log: 2026/03/03 03:27:01 [ ... show more Fail2Ban banned 104.207.56.205 for security violations in jail wp-armour. Log: 2026/03/03 03:27:01 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.56.205 \| Target: wplogin" , client: 104.207.56.205, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2025-11-27 13:18:09 (6 months ago)	Attempted brute force login to web vpn 1138 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 1138 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2025-11-26 19:20:41 (6 months ago)	(From [email protected]) Want targeted visitors visiting siegelchiroprac ... show more (From [email protected]) Want targeted visitors visiting siegelchiropractic.com now? Start your Free Test. show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-25 02:21:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:20:49.716699 2025] [security2:error] [pid 20715:tid 20715] [client 104.207.56.205:26745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.inverzona.com"] [uri "/.env"] [unique_id "aSUSgV3OW_sBD4HoAz3G_wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:58:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:57:58.838869 2025] [security2:error] [pid 16709:tid 16709] [client 104.207.56.205:52301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.itsupitsdown.com"] [uri "/.git/HEAD"] [unique_id "aST_FqAfQHqHdeycxHs8awAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:18:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.205 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:14:05.320418 2025] [security2:error] [pid 19337:tid 19337] [client 104.207.56.205:15987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ianadolphusthomas.com"] [uri "/.svn/wc.db"] [unique_id "aST0zXpo_WjATsvZZwyk6AAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-22 16:36:16 (6 months ago)	(From [email protected]) Want more engagement on theadjustment.com? Start ... show more (From [email protected]) Want more engagement on theadjustment.com? Start your Free Test. show less	Phishing Web Spam
Anonymous	2025-11-18 22:21:54 (6 months ago)	Attempted brute force login to web vpn 271 time(s); last attempt for 2025.11.18 is noted in report t ... show more Attempted brute force login to web vpn 271 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2025-11-18 16:19:41 (6 months ago)	(From [email protected]) Ready to see spinalharmonychiropractic.com ... show more (From [email protected]) Ready to see spinalharmonychiropractic.com traffic grow fast? Get your Free Demo. show less	Phishing Web Spam
🇬🇧 oncord	2025-11-18 15:11:53 (6 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-10-15 02:48:08 (7 months ago)	Form spam	Web Spam
🇺🇸 oncord	2025-10-12 01:13:57 (7 months ago)	Form spam	Web Spam
🇺🇸 oncord	2025-10-10 11:10:56 (7 months ago)	Form spam	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-10-07 17:13:55 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.107.156.227

🇨🇳 180.159.15.189

🇵🇰 160.187.180.175

🇺🇸 99.149.253.183

🇷🇴 92.118.39.236

🇩🇪 91.107.151.199

🇱🇹 81.30.98.44

🇩🇪 45.130.203.93

🇨🇳 1.24.16.146

🇩🇪 167.94.145.24

🇸🇬 157.245.200.225

🇨🇱 152.173.48.122

🇨🇦 85.217.149.51

🇺🇸 74.235.121.84

🇹🇼 61.231.218.225

🇰🇷 47.80.59.241

🇸🇬 20.6.35.235

🇰🇷 220.92.117.221

🇻🇳 171.231.196.85

🇺🇸 162.216.149.165