JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.248

104.207.56.248 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.248

Whois 104.207.56.248

IP Abuse Reports for 104.207.56.248:

This IP address has been reported a total of 135 times from 22 distinct sources. 104.207.56.248 was first reported on June 3rd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-05-25 18:20:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-01-05 20:32:04 (5 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.05 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Carsten	2025-12-24 16:37:36 (5 months ago)	GET [wordpress//wp-admin/setup-config.php]	Port Scan
🇺🇸 octageeks.com	2025-12-15 05:06:59 (5 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇦🇺 MAGIC	2025-12-15 02:02:13 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-12-12 20:49:02 (5 months ago)	wordpress-trap	Web App Attack
🇩🇪 iNetWorker	2025-12-09 04:29:30 (5 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 18:09:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 13:09:13.442047 2025] [security2:error] [pid 28080:tid 28080] [client 104.207.56.248:19305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exotic-dancers-los-angeles.com"] [uri "/.svn/wc.db"] [unique_id "aS8rScFLZyHBjYGn-wwkewAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:55:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:55:39.837432 2025] [security2:error] [pid 27267:tid 27267] [client 104.207.56.248:47765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elbera.com"] [uri "/.git/HEAD"] [unique_id "aS5_W1EuRBMUW6QSPjgMYwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:26:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:26:26.718742 2025] [security2:error] [pid 27869:tid 27869] [client 104.207.56.248:48517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fabwestmfg.com"] [uri "/.env"] [unique_id "aS54gssrUe7YQt-iELzuHQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-27 13:46:15 (6 months ago)	Attempted brute force login to web vpn 2128 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2128 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇧🇪 madeit	2025-11-27 12:14:31 (6 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:47:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:47:54.485853 2025] [security2:error] [pid 18385:tid 18385] [client 104.207.56.248:35249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.davisound.com"] [uri "/.env"] [unique_id "aSa-ur-QAyw0ZfwvfxF3DgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:11:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:10:54.567845 2025] [security2:error] [pid 4710:tid 4710] [client 104.207.56.248:30217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brianbrock.com"] [uri "/.svn/wc.db"] [unique_id "aSaZ7seoKgAcb4Rxnmr2bAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:32:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:32:41.268616 2025] [security2:error] [pid 5318:tid 5327] [client 104.207.56.248:23631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alexanderwarnow.com"] [uri "/.git/HEAD"] [unique_id "aSZmyYtQIEBqnJukf2LLlAAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.185.53.93

🇺🇸 66.132.172.115

🇮🇳 202.88.209.51

🇺🇸 172.98.32.116

🇲🇲 103.134.205.21

🇺🇸 66.132.172.38

🇺🇸 20.169.104.49

🇺🇸 2604:a880:0:202a::b41:a000

🇫🇮 185.148.1.18

🇧🇷 138.99.80.102

🇨🇳 101.96.200.79

🇨🇳 220.205.122.34

🇺🇸 205.185.127.250

🇬🇧 193.176.29.17

🇨🇳 183.152.43.165

🇹🇭 152.32.245.170

🇫🇮 147.185.133.135

🇹🇼 111.185.230.249

🇨🇳 101.126.155.86

🇷🇺 93.181.239.64