JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.55.55

104.207.55.55 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.55.55

Whois 104.207.55.55

IP Abuse Reports for 104.207.55.55:

This IP address has been reported a total of 141 times from 22 distinct sources. 104.207.55.55 was first reported on June 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-04-23 22:11:10 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.55.55 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.55.55 2026-04-23 12:15:24 http://47.108.196.169/yealink/y000000000000.cfg show less	Web App Attack
🇩🇪 4server	2026-04-21 09:49:41 (1 month ago)	[TueApr2111:49:36.0912842026][security2:error][pid3025242:tid3025345][client104.207.55.55:0]ModSecur ... show more [TueApr2111:49:36.0912842026][security2:error][pid3025242:tid3025345][client104.207.55.55:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"akastudio.ch\"][uri\"/database.sql\"][unique_id\"aedIMEodPrcZ1V_bs78kewAAANc\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-14 07:05:09 (1 month ago)	Blocked: Reason='Possible SQL injection activity (170/60 min)'; Requests=170	SQL Injection
🇫🇷 masterguru	2026-03-28 09:38:15 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.55 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.55.55 (DE/Germany/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:52:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:52:25.297265 2025] [security2:error] [pid 9772:tid 9772] [client 104.207.55.55:10311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowerwood.com"] [uri "/.env"] [unique_id "aSQq2RjthaTPq7zWmdwo8gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:05:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:05:02.111523 2025] [security2:error] [pid 7830:tid 7830] [client 104.207.55.55:11751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oxyveggietv.com.mroxygen.org"] [uri "/.env"] [unique_id "aSPnfskgNJIPwehBq6gMRwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:06:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:06:01.903720 2025] [security2:error] [pid 9817:tid 9817] [client 104.207.55.55:13509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.asterioland.com"] [uri "/.env"] [unique_id "aSPZqcZNwUj5bVG5IK6xUAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-11-24 03:10:09 (6 months ago)	Blocked by UFW (TCP on 80) Source port: 23163 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 23163 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 104.207.55.55) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 01:00:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.55.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 20:00:00.610178 2025] [security2:error] [pid 19873:tid 19873] [client 104.207.55.55:50137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.intnlc.org"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRZ_EF7GTCckD4gvsRdstwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-07 00:24:40 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-10-11 03:06:27 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 12:01:22 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 21:01:52 (7 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 15:29:41 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 2a05:d018:10df:d400:49b7:7e63:71a4:98a3

🇰🇷 211.178.247.182

🇨🇳 183.238.181.202

🇳🇱 45.148.10.152

🇮🇳 20.193.141.133

🇨🇳 220.197.78.2

🇨🇳 182.242.168.36

🇪🇨 181.78.242.131

🇮🇳 122.187.229.218

🇸🇬 118.194.234.8

🇺🇸 72.10.32.138

🇩🇪 47.254.170.228

🇺🇸 20.14.81.42

🇷🇺 213.180.203.10

🇪🇨 186.178.65.97

🇫🇷 173.212.213.201

🇨🇳 171.37.47.213

🇧🇼 168.167.228.123

🇲🇴 125.31.2.160

🇻🇳 113.176.87.118