JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.56.82

104.207.56.82 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.56.82

Whois 104.207.56.82

IP Abuse Reports for 104.207.56.82:

This IP address has been reported a total of 122 times from 15 distinct sources. 104.207.56.82 was first reported on June 5th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-06-02 08:44:00 (6 days ago)	(From [email protected]) Most WordPress stores don't even rank for 5% of their products. This ... show more (From [email protected]) Most WordPress stores don't even rank for 5% of their products. This plugin auto-writes SEO content for your entire product range, does all thps://e keyword research and publishes it daily. Free 2-week trial — no card needed. Watch how: https://youtube.com/watch?v=O5GtlI3FQjw Also check out https://WordPressAIPlugin.com for more details! show less	Phishing Web Spam
🇫🇷 masterguru	2026-04-06 00:47:22 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.56.82 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.56.82 (DE/Germany/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-03-31 11:27:09 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.56.82 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.56.82 (DE/Germany/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-03-30 07:42:20 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.56.82 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.56.82 (DE/Germany/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2026-03-24 08:09:14 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 13:59:34 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 08:59:22.414525 2026] [security2:error] [pid 7049:tid 7049] [client 104.207.56.82:44285] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|oualierealty.com\|F\|4"] [data "close, keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oualierealty.com"] [uri "/index.php"] [unique_id "aW-KOofc8hYs4JgnbkOW4wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 flws	2025-11-25 05:52:11 (6 months ago)	Using APIs to sign up a huge number of fake users	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:24:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:24:31.766579 2025] [security2:error] [pid 10392:tid 10392] [client 104.207.56.82:20115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.maritanasystems.com"] [uri "/.svn/wc.db"] [unique_id "aSQWP1mGrnf6tuMyKRsglQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:22:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:22:47.971270 2025] [security2:error] [pid 21785:tid 21785] [client 104.207.56.82:51985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lamariposagallery.com"] [uri "/.git/HEAD"] [unique_id "aSQHx3yAAqCb-vdxbKI8AAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:27:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.56.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:27:01.985917 2025] [security2:error] [pid 30317:tid 30317] [client 104.207.56.82:16205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rescuedpekes.com.aarce.me"] [uri "/.git/HEAD"] [unique_id "aSP6tU6vO73mx_CYt2PYHwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 AWW-Admin	2025-10-16 15:57:18 (7 months ago)	(wordpress) Failed wordpress login from 104.207.56.82 (DE/Germany/-)	Brute-Force
Anonymous	2025-10-10 17:14:09 (7 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 21:32:17 (7 months ago)	Attempted brute force login to web vpn 91 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 91 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 22:03:12 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 03:20:17 (8 months ago)	2025-10-01T05:20:15.075625 localhost.localdomain sshd[227843]: pam_unix(sshd:auth): authentication f ... show more 2025-10-01T05:20:15.075625 localhost.localdomain sshd[227843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.56.82 2025-10-01T05:20:16.749370 localhost.localdomain sshd[227843]: Failed password for invalid user [email protected] from 104.207.56.82 port 38689 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 185.226.93.242

🇨🇳 115.151.72.155

🇸🇬 47.128.121.154

🇭🇰 43.154.138.234

🇨🇦 15.235.96.191

🇺🇸 5.181.219.63

🇨🇳 218.26.204.42

🇳🇱 195.178.110.30

🇱🇹 194.165.16.166

🇬🇧 188.240.59.36

🇧🇷 179.185.1.97

🇪🇨 177.53.215.134

🇺🇸 162.216.150.65

🇦🇺 158.178.141.16

🇺🇦 128.0.104.39

🇮🇷 84.47.205.84

🇭🇰 47.82.124.98

🇺🇸 23.23.137.202

🇰🇷 8.220.208.26

🇸🇬 8.219.149.201