JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.36

104.207.56.36 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.36

Whois 104.207.56.36

IP Abuse Reports for 104.207.56.36:

This IP address has been reported a total of 123 times from 17 distinct sources. 104.207.56.36 was first reported on June 5th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-04-14 19:26:03 (2 months ago)	[TueApr1421:25:59.4008822026][security2:error][pid2546681:tid2546690][client104.207.56.36:0]ModSecur ... show more [TueApr1421:25:59.4008822026][security2:error][pid2546681:tid2546690][client104.207.56.36:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[\\\\\\\\n\\\\\\\\r]\"atARGS_GET:message.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"143\"][id\"390722\"][rev\"5\"][msg\"Atomicorp.comWAFRules:HTTPHeaderInjectionAttackviapayload\(CR/LFdetected\)\"][data\"MatchedData:\\\\x0dfoundwithinARGS_GET:message:Greetings\\\\x0d\\\\x0a\\\\x0d\\\\x0aFeatureeimeko.chinGoogleSearchIndexandhaveitbevisibleinwebsearchresults\!\\\\x0d\\\\x0a\\\\x0d\\\\x0aEnlisteimeko.chnow:https://searchregister.org\\\\x0d\\\\x0a\"][severity\"CRITICAL\"][hostname\"www.eimeko.ch\"][uri\"/\"][unique_id\"ad6Ux9Lq-pDitEby-S4ROgAAAMY\"]\,referer:https://www.eimeko.ch/ show less	Port Scan Brute-Force Web App Attack
🇧🇪 cmbplf	2026-04-05 20:30:38 (2 months ago)	7.269 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:54 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-10 13:03:58 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-28 10:54:01 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 08:11:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:11:26.790172 2025] [security2:error] [pid 4138:tid 4138] [client 104.207.56.36:44665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.trouba.com"] [uri "/.git/HEAD"] [unique_id "aSQTLt4_vcKKOzVE51ig9wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:29:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:29:20.507673 2025] [security2:error] [pid 5913:tid 5913] [client 104.207.56.36:60481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asociacionmutualsanjose.com"] [uri "/.svn/wc.db"] [unique_id "aSQJUGi1ThTuo4BI-IKy8AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:57:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:57:50.166211 2025] [security2:error] [pid 20348:tid 20348] [client 104.207.56.36:35351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aallred.com"] [uri "/.env"] [unique_id "aSPlzsf-kB-NTBPaJRTRmwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:41:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:41:31.841588 2025] [security2:error] [pid 14497:tid 14497] [client 104.207.56.36:10709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.morefrogs.com"] [uri "/.svn/wc.db"] [unique_id "aSPh-5dwDvH_8uwjrWDZtAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:13:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:13:40.870144 2025] [security2:error] [pid 31464:tid 31464] [client 104.207.56.36:46691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ahelfrick.com"] [uri "/.env"] [unique_id "aSPbdEf3oYG4adLmFYf-cQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 serverargentina.com	2025-09-30 19:37:10 (8 months ago)	Sep 30 15:37:09 us-mfl-02 sshd[3355756]: Invalid user user from 104.207.56.36 port 17169 ...	Brute-Force SSH
Anonymous	2025-04-06 01:24:05 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 16:00:03 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 17:31:42 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 conseilgouz	2025-04-04 06:33:31 (1 year ago)	sae-12 : Block return, carriage return, ... characters=>/index.php?Itemid=565%27&id=127&opti ... show more sae-12 : Block return, carriage return, ... characters=>/index.php?Itemid=565%27&id=127&option=com_content&view=article(') show less	Hacking

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.30.58.134

🇵🇱 194.180.49.145

🇮🇳 182.95.215.69

🇨🇳 180.76.240.16

🇺🇸 91.193.232.143

🇺🇸 216.180.246.135

🇳🇱 192.109.200.94

🇮🇳 103.68.40.36

🇺🇸 91.193.232.170

🇺🇸 73.9.228.88

🇺🇸 69.74.29.21

🇮🇪 54.170.166.43

🇵🇰 43.242.176.87

🇨🇱 34.176.163.28

🇺🇸 174.64.199.71

🇺🇸 173.184.175.13

🇨🇳 171.43.246.18

🇳🇱 95.85.226.199

🇺🇸 91.193.232.172

🇨🇳 39.165.39.104