JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.197

104.207.55.197 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.197

Whois 104.207.55.197

IP Abuse Reports for 104.207.55.197:

This IP address has been reported a total of 127 times from 16 distinct sources. 104.207.55.197 was first reported on June 5th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-03-31 12:13:23 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.197 (DE/Germany/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.197 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-03-29 16:11:29 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.197 (DE/Germany/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.197 (DE/Germany/-): 1 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-01-05 20:34:43 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-28 03:03:48 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 22:03:40.957674 2025] [security2:error] [pid 17021:tid 17040] [client 104.207.55.197:35341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gfx-technology.com"] [uri "/.git/HEAD"] [unique_id "aVCeDGYcK6GIUiQSBKdcKwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SLSLLC	2025-12-28 01:52:33 (5 months ago)	104.207.55.197 - - [28/Dec/2025:01:52:31 +0000] "GET /.env HTTP/1.1" 301 485 "-" "Mozilla/5.0 (Windo ... show more 104.207.55.197 - - [28/Dec/2025:01:52:31 +0000] "GET /.env HTTP/1.1" 301 485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ... show less	Brute-Force Web App Attack
🇫🇷 Thaliruth	2025-12-26 16:16:42 (5 months ago)	104.207.55.197 - - [26/Dec/2025:17:16:38 +0100] "GET /.aws/credentials HTTP/1.1" 404 262 "-" "Mozill ... show more 104.207.55.197 - - [26/Dec/2025:17:16:38 +0100] "GET /.aws/credentials HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" default:80 104.207.55.197 - - [26/Dec/2025:17:16:38 +0100] "GET /.aws/credentials HTTP/1.0" 404 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-25 23:58:17 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 18:58:11.846206 2025] [security2:error] [pid 14785:tid 14785] [client 104.207.55.197:26753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thinksite.com"] [uri "/.env"] [unique_id "aU3Pk1QfYWBXhEHUG-knoQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-24 03:30:21 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇦🇺 MAGIC	2025-12-23 02:08:32 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (5 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-11-24 05:04:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.197 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:03:50.400258 2025] [security2:error] [pid 26873:tid 26873] [client 104.207.55.197:24177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.clickableprizelinks.com"] [uri "/.git/HEAD"] [unique_id "aSPnNg74IUD3O4aB-BYQwQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rip	2025-11-02 12:51:29 (7 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇩🇪 Marc	2025-10-29 20:22:54 (7 months ago)		Brute-Force
🇩🇪 Ad Ministrator	2025-10-21 15:27:21 (7 months ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
Anonymous	2025-10-11 08:29:27 (7 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 196.179.249.84

🇳🇱 195.178.110.26

🇳🇱 176.65.149.230

🇳🇱 160.119.76.19

🇭🇰 101.36.111.86

🇫🇷 82.127.110.15

🇱🇹 81.30.98.49

🇹🇷 185.39.204.145

🇭🇰 172.253.5.22

🇰🇷 59.21.37.60

🇺🇸 40.83.182.122

🇺🇸 34.148.62.86

🇲🇽 187.225.47.243

🇺🇸 172.236.127.133

🇺🇸 165.154.255.26

🇨🇳 117.159.39.226

🇰🇷 112.220.223.234

🇪🇸 85.87.86.29

🇩🇪 69.5.169.70

🇺🇸 67.205.20.116