JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.167.19.147

104.167.19.147 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.167.19.147

Whois 104.167.19.147

IP Abuse Reports for 104.167.19.147:

This IP address has been reported a total of 45 times from 28 distinct sources. 104.167.19.147 was first reported on October 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-06-13 12:18:04 (4 months ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇩🇪 georgengelmann	2026-06-12 06:31:10 (4 months ago)	Failed login attempt for ngadimin	Brute-Force Web App Attack
🇬🇧 spamverify.com	2026-06-12 04:11:48 (4 months ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-06-11 04:12:22 (4 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2025-12-28 18:32:32 (9 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇮🇩 Kencang.ID	2025-12-15 17:03:23 (10 months ago)	Failed Login Attempt 2025-12-15 17:03:23 \| 104.167.19.147 \| Desktop \| Google Chrome \| Ashburn, Virgi ... show more Failed Login Attempt 2025-12-15 17:03:23 \| 104.167.19.147 \| Desktop \| Google Chrome \| Ashburn, Virginia, United States \| 3xK Tech GmbH \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36 show less	FTP Brute-Force Brute-Force
Anonymous	2025-12-06 17:32:52 (10 months ago)	botnet	DDoS Attack
🇵🇱 sefinek.net	2025-12-05 22:24:55 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 10dencehispahard SL	2025-12-03 07:40:28 (10 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-12-01 15:02:12 (10 months ago)	botnet	DDoS Attack
Anonymous	2025-11-25 08:39:56 (10 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:57:23 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:57:05.570122 2025] [security2:error] [pid 10063:tid 10063] [client 104.167.19.147:28211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alphadyne.com"] [uri "/.git/HEAD"] [unique_id "aSU3ISr9D8jlbphht8Ss3QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:38:48 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:37.306312 2025] [security2:error] [pid 26139:tid 26139] [client 104.167.19.147:45871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gmanapps.com"] [uri "/.svn/wc.db"] [unique_id "aSUyzSCgX_OVgIefGnFGlgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:11:57 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:11:52.145630 2025] [security2:error] [pid 27608:tid 27608] [client 104.167.19.147:24847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mcginleyclan.com"] [uri "/.svn/wc.db"] [unique_id "aSUsiATvKYIZvAakXwNcMwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:48:57 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:48:51.562921 2025] [security2:error] [pid 7016:tid 7016] [client 104.167.19.147:31447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.churchbehindthewalls.com"] [uri "/.svn/wc.db"] [unique_id "aSUnI6onwUrdrO8uSGi4PgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 16 to 30 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 160.187.220.155

🇫🇮 147.185.133.192

🇰🇷 112.164.244.60

🇮🇳 103.69.201.55

🇺🇸 66.93.72.220

🇧🇪 35.187.168.142

🇫🇷 13.140.155.144

🇰🇷 221.156.126.1

🇧🇷 187.95.22.65

🇳🇱 185.223.235.28

🇺🇸 162.216.149.183

🇹🇳 154.110.97.33

🇨🇳 106.75.25.139

🇮🇩 103.159.199.43

🇱🇹 77.90.185.16

🇭🇰 43.155.21.198

🇧🇪 34.38.142.158

🇺🇸 3.232.82.72

🇺🇸 216.218.206.102

🇹🇼 198.235.24.80