JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.213

104.207.55.213 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 36%: ?

36%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.213

Whois 104.207.55.213

IP Abuse Reports for 104.207.55.213:

This IP address has been reported a total of 138 times from 27 distinct sources. 104.207.55.213 was first reported on June 4th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-30 01:20:37 (8 hours ago)	Web App Attack	Web App Attack
🇲🇽 octageeks.com	2026-06-30 04:06:50 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇽 octageeks.com	2026-06-26 04:14:52 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇬🇧 poundawebsiteltd	2026-06-25 05:19:31 (1 month ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 104.207.55.213 - - [25/Jun/2026:06:19:26 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 104.207.55.213 - - [25/Jun/2026:06:19:26 +0100] POST /wp-login.php HTTP/1.1 200 6781 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇷 ELYAZ	2026-06-24 04:17:44 (1 month ago)	(y4) Failed scan -byebye- from 104.207.55.213 (DE/Germany/-): (CF_ENABLE)	Hacking
🇫🇷 tecnicorioja	2026-06-23 22:00:26 (1 month ago)	wp-login attack [23/Jun/2026:17:30:53	Brute-Force Web App Attack
Anonymous	2026-06-22 22:53:52 (1 month ago)	[ns67.kdns.gr] httpd-login-spray-site: sites=kapaweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs/access ... show more [ns67.kdns.gr] httpd-login-spray-site: sites=kapaweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/access_ssl_log; samples=site_wide=true \| distinct_ips=38 \| /wp-login.php show less	Hacking Web App Attack
🇩🇪 london2038.com	2026-06-22 10:44:51 (1 month ago)	Attacking WordPress 104.207.55.213 - - [22/Jun/2026:12:44:47 +0200] "POST /wp-login.php HTTP/1.1" 50 ... show more Attacking WordPress 104.207.55.213 - - [22/Jun/2026:12:44:47 +0200] "POST /wp-login.php HTTP/1.1" 503 19311 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" show less	Brute-Force Web App Attack
🇺🇸 Victor López	2026-06-22 10:31:52 (1 month ago)	buscaempresas.co 104.207.55.213 - - [22/Jun/2026:05:30:11 -0500] "POST /wp-login.php HTTP/1.1" 404 7 ... show more buscaempresas.co 104.207.55.213 - - [22/Jun/2026:05:30:11 -0500] "POST /wp-login.php HTTP/1.1" 404 7699 "https://buscaempresas.co/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" buscaempresas.co 104.207.55.213 - - [22/Jun/2026:05:30:38 -0500] "POST /wp-login.php HTTP/1.1" 404 7699 "https://buscaempresas.co/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" buscaempresas.co 104.207.55.213 - - [22/Jun/2026:05:31:51 -0500] "POST /wp-login.php HTTP/1.1" 404 7699 "https://buscaempresas.co/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-22 03:01:23 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇲🇹 Malta	2026-06-20 07:51:12 (1 month ago)	104.207.55.213 - - [20/Jun/2026:09:51:12 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 104.207.55.213 - - [20/Jun/2026:09:51:12 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇲🇽 octageeks.com	2026-06-20 04:23:23 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇬🇧 poundawebsiteltd	2026-06-19 23:54:20 (1 month ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 104.207.55.213 - - [20/Jun/2026:00:54:15 +0100] ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 104.207.55.213 - - [20/Jun/2026:00:54:15 +0100] POST /wp-login.php HTTP/1.1 200 7365 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 iNetWorker	2026-06-16 16:37:38 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
🇬🇷 setupgr	2026-06-15 22:22:21 (1 month ago)	(mod_security) mod_security (id:900001) triggered by 104.207.55.213: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 104.207.55.213: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 01:22:19.308029 2026] [security2:error] [pid 1965768:tid 1965818] [client 104.207.55.213:53005] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.ions.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.ions.gr"] [uri "/wp-login.php"] [unique_id "ajB7G5hSggell5vQAURi5AAAAVc"], referer: https://mail.ions.gr/wp-login.php show less	Port Scan

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 2400:cb00:79:1000:4a29:af8d:7f48:a1be

🇨🇭 209.99.190.113

🇷🇺 194.54.176.99

🇫🇮 162.158.238.151

🇺🇸 136.56.34.147

🇫🇷 91.231.89.12

🇫🇷 185.177.72.10

🇦🇲 176.32.193.16

🇺🇸 174.79.87.115

🇩🇪 165.154.138.165

🇰🇷 118.37.214.187

🇷🇴 80.94.92.179

🇺🇸 47.251.117.215

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇮🇳 42.109.144.156

🇮🇶 37.236.210.95

🇧🇷 179.220.43.59

🇺🇸 162.216.149.112

🇮🇩 147.139.211.111