JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.113

104.207.55.113 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.113

Whois 104.207.55.113

IP Abuse Reports for 104.207.55.113:

This IP address has been reported a total of 126 times from 16 distinct sources. 104.207.55.113 was first reported on June 6th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-06-01 09:01:45 (5 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 07:34:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 02:34:01.034904 2026] [security2:error] [pid 28854:tid 28854] [client 104.207.55.113:39185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "servecon.co"] [uri "/.git/HEAD"] [unique_id "aWiYaU6JoFVsiQuViLltigAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2026-01-13 09:50:10 (4 months ago)	IM360 WAF: Hidden file access	Brute-Force
Anonymous	2026-01-02 16:19:42 (5 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2026.01.02 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2026.01.02 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2026-01-01 11:32:48 (5 months ago)	(From [email protected]) Hi, For just $250/month, you can add a dedicated Digital Marketi ... show more (From [email protected]) Hi, For just $250/month, you can add a dedicated Digital Marketing Assistant to your team—managing SEO, ad campaigns, social media, email marketing, and daily operational tasks. The first month is free, allowing you to start without any commitment. Simply complete the form to begin. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇦🇺 MAGIC	2025-12-20 01:13:29 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 06:06:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:05:54.895343 2025] [security2:error] [pid 32678:tid 32678] [client 104.207.55.113:31615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.riccardiagency.com"] [uri "/.env"] [unique_id "aSaYwuiQZg-rfyTqUzoGYwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:03:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:03:21.399445 2025] [security2:error] [pid 2135101:tid 2135101] [client 104.207.55.113:25415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ajwood.net"] [uri "/.git/HEAD"] [unique_id "aSZDybHXfNyaKoD0xdQbiQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:35:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:35:45.090865 2025] [security2:error] [pid 13756:tid 13832] [client 104.207.55.113:52429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.joshuapaulweckesser.com"] [uri "/.env"] [unique_id "aSVOQS2vRx1ksuNuFaHVmAAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:32:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:32:43.927800 2025] [security2:error] [pid 29835:tid 29835] [client 104.207.55.113:24027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gotomywebmail.com.globalweb123.com"] [uri "/.git/HEAD"] [unique_id "aSQmO8jkO0b8OPtltgL1lQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:10:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:10:06.012039 2025] [security2:error] [pid 3604:tid 3604] [client 104.207.55.113:26903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.eastsidecellostudio.com"] [uri "/.svn/wc.db"] [unique_id "aSQS3iULRwldImgG8G73-wAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-09 15:47:40 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, c ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-05 04:32:18 (7 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, co ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇺🇸 Rip	2025-11-02 04:38:08 (7 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
Anonymous	2025-10-28 11:27:11 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.246.43.39

🇯🇵 153.211.168.116

🇫🇮 147.185.133.196

🇳🇱 80.82.77.139

🇸🇬 45.82.78.103

🇬🇧 45.82.76.115

🇺🇸 45.55.153.86

🇺🇸 20.221.69.50

🇨🇳 220.189.196.134

🇬🇧 213.166.84.57

🇺🇸 207.90.244.17

🇳🇱 195.211.191.112

🇧🇴 190.129.122.12

🇲🇽 186.96.145.241

🇬🇧 185.247.137.118

🇮🇳 172.217.34.220

🇭🇰 165.154.92.172

🇬🇧 35.203.211.217

🇧🇷 170.0.74.225

🇫🇷 163.172.27.20