JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.127

104.207.55.127 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.127

Whois 104.207.55.127

IP Abuse Reports for 104.207.55.127:

This IP address has been reported a total of 117 times from 9 distinct sources. 104.207.55.127 was first reported on June 7th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Detmach	2026-05-13 11:18:54 (4 weeks ago)	Security attack detected. Multiple failed attempts from 104.207.55.127. IP banned for 1440 minutes a ... show more Security attack detected. Multiple failed attempts from 104.207.55.127. IP banned for 1440 minutes at 13.05.2026 14:17:54. Failed attempts: 1 show less	Brute-Force
🇩🇪 Carsten	2026-05-12 17:36:07 (4 weeks ago)	GET http [GET http://cleancobol.com/.aws/credentials]	Port Scan
🇺🇸 TPI-Abuse	2025-12-02 21:11:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:11:31.193494 2025] [security2:error] [pid 20593:tid 20593] [client 104.207.55.127:48509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "j3pr.com"] [uri "/.svn/wc.db"] [unique_id "aS9WA_U3apxhRKyNVv5OBgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:12:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:12:25.590205 2025] [security2:error] [pid 31971:tid 31971] [client 104.207.55.127:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perl-photo.com"] [uri "/.svn/wc.db"] [unique_id "aS8B2ZShMfayDV2iFJcU7wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:48:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:48:09.954842 2025] [security2:error] [pid 23680:tid 23680] [client 104.207.55.127:39355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rallyegroup.com"] [uri "/.env"] [unique_id "aS6nydRQnGkQegoHWP3pLwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 06:00:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:00:11.399388 2025] [security2:error] [pid 8203:tid 8203] [client 104.207.55.127:59477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestcountryclubs.com"] [uri "/.env"] [unique_id "aS6Aa5ivsjo_SZRg9PCJJAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:39:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:39:52.344877 2025] [security2:error] [pid 4122:tid 4122] [client 104.207.55.127:17303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delicatessefoods.com"] [uri "/.svn/wc.db"] [unique_id "aS5tmGZG6M_MgqTKBVtLuQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-30 19:08:45 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 15:08:40.658624 2025] [security2:error] [pid 9360:tid 9360] [client 104.207.55.127:46353] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lisalehmann.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lisalehmann.com"] [uri "/photography.html/wp-json/wp/v2/users"] [unique_id "aQO3uIOrhzWK-ow3QTq1VgAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-29 11:18:30 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.55.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 07:18:23.213351 2025] [security2:error] [pid 27922:tid 27922] [client 104.207.55.127:16033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|crr-construction.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "crr-construction.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQH3_zyBjc35x3sj_7L3ZQAAABg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 cloudmax	2025-10-27 02:47:58 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2025-04-07 12:25:07 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 10:22:34 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 04:06:50 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 22:31:57 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 21:18:53 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 5.165.19.3

🇨🇳 223.101.16.255

🇺🇸 212.56.54.58

🇮🇩 182.6.94.155

🇨🇳 180.142.56.145

🇰🇷 125.138.175.113

🇨🇳 124.235.175.208

🇫🇷 91.231.89.232

🇸🇪 81.226.129.67

🇷🇺 81.30.212.94

🇺🇸 208.84.100.108

🇳🇱 195.26.87.217

🇮🇹 151.47.6.236

🇹🇷 146.19.125.102

🇵🇰 103.244.172.63

🇫🇷 92.205.57.72

🇰🇷 61.76.112.4

🇨🇳 14.103.64.177

🇧🇩 161.248.189.72

🇺🇸 135.237.126.233