JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.240

104.207.55.240 was found in our database!

This IP was reported 142 times. Confidence of Abuse is 8%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.240

Whois 104.207.55.240

IP Abuse Reports for 104.207.55.240:

This IP address has been reported a total of 142 times from 20 distinct sources. 104.207.55.240 was first reported on June 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zupan	2026-05-06 04:05:23 (1 month ago)	Blocked by UFW on vps [3000/tcp] \| SPT: 13637 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [3000/tcp] \| SPT: 13637 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 AutosOnShow	2026-05-05 15:29:05 (1 month ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-05-05 15:28:19.010 \|	Web App Attack
🇮🇹 VHosting	2026-03-09 20:50:02 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-01-05 20:24:22 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 Gem	2025-11-28 23:12:28 (6 months ago)	Unauthorized web scan.	Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-27 00:50:08 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 05:33:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:33:11.088891 2025] [security2:error] [pid 5361:tid 5377] [client 104.207.55.240:51279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.groceriesfromscratch.andyboynton.com"] [uri "/.git/HEAD"] [unique_id "aSaRFw6mFNQyT6yLV4IGAAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:09:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:09:44.126400 2025] [security2:error] [pid 27884:tid 27884] [client 104.207.55.240:11605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jonathanwilsonphotography.com"] [uri "/.git/HEAD"] [unique_id "aSZFSOv3fg5oR0pfwdNDfgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:28:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:28:33.749430 2025] [security2:error] [pid 7960:tid 7960] [client 104.207.55.240:28635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.leewis.com"] [uri "/.svn/wc.db"] [unique_id "aSU-gYaDkt2jNUcWiTEEjwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Carsten	2025-11-25 04:39:13 (6 months ago)	GET [.git/HEAD]	Port Scan
🇺🇸 TPI-Abuse	2025-11-25 04:30:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:30:20.376392 2025] [security2:error] [pid 21142:tid 21142] [client 104.207.55.240:44765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.linguistes.com"] [uri "/.env"] [unique_id "aSUw3Clu_VTI57EyhZm19AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:03:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:03:45.764007 2025] [security2:error] [pid 3130:tid 3130] [client 104.207.55.240:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.infinitewashing.com"] [uri "/.env"] [unique_id "aSUqoaUu4VMXehaSDFiMvwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:00:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:00:19.749407 2025] [security2:error] [pid 22477:tid 22477] [client 104.207.55.240:31077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.desertautoworks.com"] [uri "/.env"] [unique_id "aSUNs_M8WWvuN9sTyTlHLQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:31:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:31:34.262258 2025] [security2:error] [pid 23244:tid 23244] [client 104.207.55.240:50507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shop.kleens-uk.com"] [uri "/.git/HEAD"] [unique_id "aSUG9tuUhp2vO15S3g9FiAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:30:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:30:45.650444 2025] [security2:error] [pid 1810:tid 1810] [client 104.207.55.240:50421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.flugstadcom.xn--lyngr-yua.net"] [uri "/.svn/wc.db"] [unique_id "aST4tRoABjoPiK4wylTiTwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2a02:4780:6:2083:0:c85:59df:1

🇺🇸 212.46.142.168

🇨🇴 181.51.91.63

🇮🇳 163.223.190.221

🇧🇩 161.248.50.213

🇵🇰 119.154.238.148

🇫🇷 92.103.134.183

🇴🇲 85.154.5.253

🇳🇱 45.148.10.152

🇮🇳 14.194.125.58

🇬🇧 195.96.139.91

🇧🇷 191.249.45.24

🇸🇮 176.65.134.3

🇩🇪 165.227.170.113

🇻🇳 103.63.108.25

🇺🇸 35.237.110.89

🇳🇱 34.147.38.136

🇺🇸 34.138.42.139

🇧🇷 34.95.203.156

🇻🇳 2405:4802:2237:af80:ce0:10ff:fe03:fbf4