JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.37

104.207.55.37 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.37

Whois 104.207.55.37

IP Abuse Reports for 104.207.55.37:

This IP address has been reported a total of 138 times from 19 distinct sources. 104.207.55.37 was first reported on June 22nd 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-04-01 19:02:17 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.37 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.37 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 oncord	2026-01-02 22:32:56 (5 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-28 22:51:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 17:51:15.779492 2025] [security2:error] [pid 23108:tid 23108] [client 104.207.55.37:26259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abcollie.com"] [uri "/wp-config.php"] [unique_id "aSonY8NJAbnh_Ko8zzTeUQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 13:35:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 08:34:53.295103 2025] [security2:error] [pid 19718:tid 19718] [client 104.207.55.37:51713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazedbyu.com"] [uri "/.env.production"] [unique_id "aSmk_bCJofqeCxsO6x_9wgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 11:01:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:01:30.147795 2025] [security2:error] [pid 27856:tid 27856] [client 104.207.55.37:9939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.maxkerrigan.com"] [uri "/.git/HEAD"] [unique_id "aSbeCnHqhuiqG7GEqvuRRQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:08:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:08:33.573231 2025] [security2:error] [pid 29656:tid 29656] [client 104.207.55.37:13617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ndakno.com"] [uri "/.git/HEAD"] [unique_id "aSaZYR8rKuYD9HTpVoSmugAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:50:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:50:34.426137 2025] [security2:error] [pid 368:tid 368] [client 104.207.55.37:11233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pete-n-sheila.net"] [uri "/.env"] [unique_id "aSaVKvT5Y7XuF2reGpSyCgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-25 22:29:19 (6 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:28:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:28:19.223514 2025] [security2:error] [pid 1647140:tid 1647186] [client 104.207.55.37:20099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.salvoni.com"] [uri "/.env"] [unique_id "aSUUQ8WdNO_bFaD03ZYipQAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:17:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:17:33.509733 2025] [security2:error] [pid 11883:tid 11883] [client 104.207.55.37:29929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.panmaneecnc.com"] [uri "/.env"] [unique_id "aSUDrcwECisgzQvPm_KVYAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 09:56:16 (6 months ago)	Try to connect to Port_Scan_80_stealth	Port Scan
Anonymous	2025-11-12 14:11:09 (6 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.11.12 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-09 00:50:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 19:49:55.995527 2025] [security2:error] [pid 14861:tid 14861] [client 104.207.55.37:29331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gardenstateakitaclub.org"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aQ_lMy7PIKDb35hH918JwwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-10-15 23:03:01 (7 months ago)	HTTP1.x attacks	DDoS Attack
Anonymous	2025-04-06 15:29:08 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇭🇰 199.45.154.141

🇫🇷 130.49.9.114

🇧🇬 193.24.211.107

🇺🇸 184.105.139.93

🇨🇳 124.117.195.70

🇮🇱 77.137.69.83

🇺🇸 66.132.195.74

🇸🇬 43.156.119.22

🇯🇵 8.216.5.164

🇩🇪 167.94.145.29

🇵🇰 154.192.21.70

🇨🇳 112.86.225.211

🇮🇩 103.165.139.145

🇺🇸 98.191.77.249

🇺🇸 66.132.195.109

🇵🇱 46.77.70.142

🇳🇱 45.148.10.157

🇺🇸 15.204.184.105

🇺🇸 207.90.244.19