JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.32.209

104.207.32.209 was found in our database!

This IP was reported 142 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.32.209

Whois 104.207.32.209

IP Abuse Reports for 104.207.32.209:

This IP address has been reported a total of 142 times from 23 distinct sources. 104.207.32.209 was first reported on June 5th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-23 01:21:13 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-10 01:04:12 (3 weeks ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.32.209 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.32.209 2026-05-09 17:50:23 /phpinfo.php show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 01:43:42 (4 weeks ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.32.209 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.32.209 2026-05-06 06:04:10 /nacos/v1/cs/ops/derby?sql=select+*+users show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-15 00:10:42 (1 month ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.32.20 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.32.209 2026-04-14 07:18:53 /v2/api-docs 2026-04-14 07:18:54 /swagger/docs/v1 2026-04-14 07:18:55 /api/swagger.json 2026-04-14 07:18:53 /prod-api/v2/api-docs 2026-04-14 07:18:54 /swagger/v1/swagger.json 2026-04-14 07:18:55 /v3/api-docs show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-23 14:01:13 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.209 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 09:01:10.454350 2026] [security2:error] [pid 483:tid 483] [client 104.207.32.209:25565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bokharienterprises.stbms.com"] [uri "/.git/config"] [unique_id "aZxdpjqw7VPPl2sUosGJhAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-02-15 14:37:39 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-02-01 01:27:23 (4 months ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.32.20 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.32.209 2026-01-31 21:50:49 /swagger/v1/swagger.json 2026-01-31 21:50:50 /api/swagger.json 2026-01-31 21:50:48 /v2/api-docs 2026-01-31 21:50:49 /swagger/docs/v1 2026-01-31 21:50:50 /v3/api-docs 2026-01-31 21:50:47 /prod-api/v2/api-docs show less	Web App Attack
🇺🇸 fbarela	2025-12-29 01:00:03 (5 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-12-12 21:51:59 (5 months ago)	botnet	DDoS Attack
🇺🇸 nowyouknow	2025-11-27 02:54:08 (6 months ago)	(From [email protected]) Enhance lifesourcefamilychiro.com search engine rankings, increase your ... show more (From [email protected]) Enhance lifesourcefamilychiro.com search engine rankings, increase your search visibility and build powerful backlinks! BonusBacklinks - we deliver daily backlinks and bring website traffic to your page EVERY DAY: + Get 85% SALE + Strong daily seo backlinks + Organic website traffic + Prices start from $1 + Bonus discount codes https://tiny.cc/BonusBacklinks-85Deal BonusBacklinks - daily seo backlinks and organic clicks to improve your page every day show less	Phishing Web Spam
Anonymous	2025-11-26 07:27:13 (6 months ago)	botnet	DDoS Attack
🇯🇵 ki3	2025-11-22 01:48:24 (6 months ago)	Fail2Ban: Web App Attacks and Forum Spam 104.207.32.209 1763776103.0(JST)	Web Spam Bad Web Bot Web App Attack
Anonymous	2025-11-14 18:03:35 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇸🇪 webbfabriken	2025-10-30 18:27:40 (7 months ago)	Invalid WordPress login attempt Attack reported by Webbfabriken Security API - WFSecAPI	Brute-Force

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.151

🇮🇷 2.180.235.94

🇬🇧 2a02:4780:a:1835:0:1b8e:d447:1

🇳🇱 195.178.110.31

🇮🇶 185.166.25.150

🇭🇰 139.198.113.29

🇻🇳 113.161.248.156

🇮🇳 68.233.116.124

🇳🇱 45.148.10.217

🇺🇸 44.204.27.202

🇺🇸 216.180.246.28

🇲🇽 186.96.151.198

🇻🇳 123.21.207.253

🇻🇳 123.20.153.94

🇫🇷 80.124.54.14

🇫🇷 46.105.252.11

🇬🇧 18.175.212.92

🇮🇳 167.71.239.213

🇩🇪 165.227.129.77

🇺🇸 165.227.120.82