JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.167.19.74

104.167.19.74 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.167.19.74

Whois 104.167.19.74

IP Abuse Reports for 104.167.19.74:

This IP address has been reported a total of 38 times from 25 distinct sources. 104.167.19.74 was first reported on September 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ambor	2026-08-11 11:43:57 (2 months ago)	Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15 show less	Web App Attack
🇩🇪 london2038.com	2026-08-11 04:15:28 (2 months ago)	Attacking WordPress 104.167.19.74 - - [11/Aug/2026:06:15:25 +0200] "POST /xmlrpc.php HTTP/1.1" 503 1 ... show more Attacking WordPress 104.167.19.74 - - [11/Aug/2026:06:15:25 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18965 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-08-11 04:00:19 (2 months ago)	(wordpress) Failed wordpress login from 104.167.19.74 (US/United States/-): (CF_ENABLE)	Brute-Force
🇫🇷 pm33	2026-08-10 01:34:41 (2 months ago)	Wordpress login attempts	Brute-Force
Anonymous	2026-07-05 21:43:17 (3 months ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 05:44:42 (3 months ago)	[Jul 5 07:44:41] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:901@154 ... show more [Jul 5 07:44:41] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.167.19.74:51163' (callid: dd4acad3197708cf74f1c77cfbe4276a) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 20:20:07 (3 months ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇲🇹 Malta	2026-06-29 11:53:51 (3 months ago)	104.167.19.74 - - [29/Jun/2026:13:53:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 104.167.19.74 - - [29/Jun/2026:13:53:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇬🇧 PeravixGroup	2026-05-09 15:01:55 (5 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 RedBear IT	2026-03-26 10:00:37 (6 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2025-12-02 05:49:28 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:49:22.165604 2025] [security2:error] [pid 27734:tid 27734] [client 104.167.19.74:25065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "budhanscom.com"] [uri "/.git/HEAD"] [unique_id "aS594uIixBVx1CaXW6fLuQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:50:04 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:49:56.185354 2025] [security2:error] [pid 13895:tid 13910] [client 104.167.19.74:50921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.riversideturners.com"] [uri "/.svn/wc.db"] [unique_id "aSU1dMqATJ-N2rrGOLaB7QAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:02:52 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:02:46.662053 2025] [security2:error] [pid 2689:tid 2689] [client 104.167.19.74:27503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.plattlawgroup.com"] [uri "/.svn/wc.db"] [unique_id "aSUqZgMcfwTfjIFpLwqwqQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:29:58 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:50.726954 2025] [security2:error] [pid 1647141:tid 1647228] [client 104.167.19.74:60373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.piazza9.com"] [uri "/.svn/wc.db"] [unique_id "aSUUntffCdpZ5cNrCNdvVAAAAVc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:06:33 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.19.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:06:24.340935 2025] [security2:error] [pid 17853:tid 17853] [client 104.167.19.74:22219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lisaraylandscapes.com"] [uri "/.svn/wc.db"] [unique_id "aSUBEPvFo2KE7B0VQHuLvwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 16 to 30 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.173

🇺🇦 194.9.14.34

🇨🇳 116.163.22.44

🇨🇳 183.224.123.132

🇰🇷 161.118.153.29

🇰🇷 121.189.124.42

🇺🇸 107.150.97.4

🇫🇷 91.231.89.18

🇳🇱 77.91.71.27

🇩🇪 64.89.163.14

🇵🇭 58.69.119.246

🇵🇰 45.194.15.117

🇳🇱 45.148.10.240

🇺🇸 38.148.20.112

🇨🇳 36.212.183.247

🇩🇪 35.242.248.44

🇬🇧 35.203.211.40

🇺🇸 20.150.193.92

🇨🇭 194.148.55.53

🇺🇸 154.39.81.222