JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.191

104.207.55.191 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.191

Whois 104.207.55.191

IP Abuse Reports for 104.207.55.191:

This IP address has been reported a total of 134 times from 19 distinct sources. 104.207.55.191 was first reported on June 4th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 billyborsht	2026-06-24 08:41:46 (6 days ago)	2026-06-24T20:41:45.287633+12:00 southern wordpress(nzangels.com)[1369551]: Authentication attempt f ... show more 2026-06-24T20:41:45.287633+12:00 southern wordpress(nzangels.com)[1369551]: Authentication attempt for unknown user root from 104.207.55.191 ... show less	Hacking Web App Attack
🇲🇽 octageeks.com	2026-06-22 04:14:24 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-06-21 12:58:23 (1 week ago)	Web attack blocked by Wordfence on mergel.nu (1 hit). Reported by CRMON.	Web App Attack
🇫🇷 tilellit.pro	2026-06-19 11:14:11 (1 week ago)	Fail2Ban banned 104.207.55.191 for security violations in jail wp-armour. Log: 2026/06/19 11:14:10 [ ... show more Fail2Ban banned 104.207.55.191 for security violations in jail wp-armour. Log: 2026/06/19 11:14:10 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.55.191 \| Target: wplogin" , client: 104.207.55.191, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 ELYAZ	2026-06-19 08:03:20 (1 week ago)	(y4) Failed scan -byebye- from 104.207.55.191 (DE/Germany/-): (CF_ENABLE)	Hacking
🇲🇹 Malta	2026-06-16 12:16:21 (2 weeks ago)	104.207.55.191 - - [16/Jun/2026:14:16:21 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 104.207.55.191 - - [16/Jun/2026:14:16:21 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" show less	Hacking Web App Attack VPN IP
🇫🇷 MatStef132	2026-05-19 20:55:42 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:21:32 (1 month ago)	MatShield L7: blocked on chat.justchat.icu (click-id-direct-nav)	DDoS Attack
🇫🇷 MatStef132	2026-05-14 21:32:37 (1 month ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇮🇩 Kencang.ID	2025-12-15 17:02:28 (6 months ago)	Failed Login Attempt 2025-12-15 17:02:28 \| 104.207.55.191 \| Desktop \| Safari \| Berlin, State of Berl ... show more Failed Login Attempt 2025-12-15 17:02:28 \| 104.207.55.191 \| Desktop \| Safari \| Berlin, State of Berlin, Germany \| 3xK Tech GmbH \| Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 show less	FTP Brute-Force Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 07:14:49 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:14:42.082722 2025] [security2:error] [pid 21900:tid 21900] [client 104.207.55.191:31227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dynarol.com"] [uri "/.git/HEAD"] [unique_id "aSVXYt2ZjZfKA6QyKD0vMwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:41:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:40:48.382337 2025] [security2:error] [pid 471:tid 471] [client 104.207.55.191:38561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.intermixx.net"] [uri "/.git/HEAD"] [unique_id "aSVBYLoPeBwO0zYu-N3ODAAAADk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:03:46 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:38.105772 2025] [security2:error] [pid 15101:tid 15119] [client 104.207.55.191:15643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ecocentri.city"] [uri "/.svn/wc.db"] [unique_id "aSUciqNKS2jdjfTVKRdaVgAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:31:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:31:10.541001 2025] [security2:error] [pid 18035:tid 18035] [client 104.207.55.191:40839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelpanesar.com"] [uri "/.git/HEAD"] [unique_id "aSUU7hv-z_vIcFSvNjH1QQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:52:30 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:52:27.755083 2025] [security2:error] [pid 27731:tid 27731] [client 104.207.55.191:16575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.iceofparadise.com"] [uri "/.git/HEAD"] [unique_id "aSUL25TbuZ_0lLYQlH1whAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.117.152.50

🇵🇰 175.107.0.182

🇺🇸 152.32.208.106

🇧🇷 149.78.12.208

🇫🇷 85.217.140.27

🇺🇸 50.255.62.89

🇨🇳 49.235.143.157

🇨🇳 36.133.110.233

🇨🇭 209.99.190.113

🇧🇷 191.6.27.255

🇰🇷 115.178.75.242

🇺🇸 84.32.70.119

🇹🇼 66.249.71.66

🇨🇦 65.111.21.228

🇳🇬 62.173.38.229

🇮🇩 36.92.140.209

🇺🇸 208.114.225.174

🇷🇴 193.46.255.86

🇮🇩 182.8.226.6

🇺🇸 170.62.31.23