JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.25

104.207.56.25 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.25

Whois 104.207.56.25

IP Abuse Reports for 104.207.56.25:

This IP address has been reported a total of 101 times from 28 distinct sources. 104.207.56.25 was first reported on June 7th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-05-19 21:11:03 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:21:32 (2 weeks ago)	MatShield L7: blocked on chat.justchat.icu (ua-quarantined)	Bad Web Bot
🇦🇺 MAGIC	2026-05-16 00:11:23 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 MatStef132	2026-05-15 15:39:10 (3 weeks ago)	MatShield L7 blocked request to mathost.eu for reason ua-q	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-05-14 21:32:38 (3 weeks ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-04-16 10:12:41 (1 month ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 Lino Project	2026-04-05 16:39:14 (2 months ago)	104.207.56.25 - - [05/Apr/2026:18:39:13 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3963 "https://www.pri ... show more 104.207.56.25 - - [05/Apr/2026:18:39:13 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3963 "https://www.primobio.it/" "PHP/5.3.63" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Jochen Pretli	2026-02-24 00:51:30 (3 months ago)	connection to honeypot	Email Spam Port Scan
🇬🇧 consul.to	2026-02-15 12:50:39 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:55:15 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:55:09.687831 2026] [security2:error] [pid 26560:tid 26560] [client 104.207.56.25:27515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teamsewusa.com"] [uri "/.env.local"] [unique_id "aZG0HREsEr7pZK_HJdrflAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:04:12 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:04:03.307962 2026] [security2:error] [pid 28837:tid 28837] [client 104.207.56.25:40381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syconline.com"] [uri "/site/.git/config"] [unique_id "aZFh0xsu0g9ku_Tx_xyKwQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:06:55 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:06:51.733240 2026] [security2:error] [pid 19271:tid 19271] [client 104.207.56.25:11807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sundolls.org"] [uri "/site/.git/config"] [unique_id "aZFUa2xD3ebqlyQhi38olwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:21:27 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:21:18.930920 2026] [security2:error] [pid 22409:tid 22409] [client 104.207.56.25:28315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "streetcarz.net"] [uri "/app/.env"] [unique_id "aZFJvt2THusS8tSx1TdSngAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-02-15 04:02:54 (3 months ago)	Try to access /admin/.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 02:32:00 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:31:56.086807 2026] [security2:error] [pid 27073:tid 27073] [client 104.207.56.25:48991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiritofacorn.com"] [uri "/admin/.git/config"] [unique_id "aZEwHM4wT5BwyHAUhPRlCgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇴 185.12.59.118

🇰🇷 175.205.37.98

🇻🇳 103.82.21.8

🇰🇷 59.152.168.184

🇦🇷 186.158.236.91

🇦🇷 152.169.106.63

🇧🇯 102.215.136.222

🇳🇱 91.92.42.64

🇳🇱 80.82.77.33

🇺🇸 43.162.98.142

🇻🇳 42.119.84.113

🇺🇸 216.131.80.82

🇬🇧 193.163.125.21

🇵🇾 181.126.153.167

🇵🇰 153.117.7.42

🇻🇳 123.27.207.152

🇦🇹 78.132.68.92

🇨🇳 39.96.211.120

🇧🇪 35.240.33.82

🇺🇸 35.231.146.137