JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.34.101

104.207.34.101 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.34.101

Whois 104.207.34.101

IP Abuse Reports for 104.207.34.101:

This IP address has been reported a total of 136 times from 19 distinct sources. 104.207.34.101 was first reported on June 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-05-19 23:47:28 (3 weeks ago)	104.207.34.101 - - [20/May/2026:01:47:28 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Lin ... show more 104.207.34.101 - - [20/May/2026:01:47:28 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
🇩🇪 Lino Project	2026-02-15 23:45:23 (4 months ago)	104.207.34.101 - - [16/Feb/2026:00:45:16 +0100] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.pri ... show more 104.207.34.101 - - [16/Feb/2026:00:45:16 +0100] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 104.207.34.101 - - [16/Feb/2026:00:45:22 +0100] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-10 14:10:09 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 07:13:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:12:56.023818 2025] [security2:error] [pid 12777:tid 12777] [client 104.207.34.101:14837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatparrots.org"] [uri "/.svn/wc.db"] [unique_id "aSVW-GMFHC6Wp0iFkw0L9wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:29:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:29:15.226359 2025] [security2:error] [pid 1841:tid 1841] [client 104.207.34.101:25147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "estudio-altamirano.com"] [uri "/.svn/wc.db"] [unique_id "aSVMu6fE3LvquiEKPOUX4QAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:55:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:55:32.428796 2025] [security2:error] [pid 1647140:tid 1647193] [client 104.207.34.101:18815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtung.com"] [uri "/.svn/wc.db"] [unique_id "aSUapMWdNO_bFaD03ZYtMgAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:23:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:23:37.272974 2025] [security2:error] [pid 8411:tid 8411] [client 104.207.34.101:16509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cureforcancerbook.com"] [uri "/.env"] [unique_id "aSUTKV-ZugUiL00oRWgfMwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 06:34:14 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 fbarela	2025-11-07 20:00:33 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-10-15 21:50:31 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-08 13:31:22 (8 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.08 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 00:36:34 (8 months ago)	Attempted brute force login to web vpn 56 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 56 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 00:40:37 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.05 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 20:12:44 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.03 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 20:56:33 (8 months ago)	Attempted brute force login to web vpn 55 time(s); last attempt for 2025.10.02 is noted in report ti ... show more Attempted brute force login to web vpn 55 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 195.230.103.244

🇻🇳 171.225.209.120

🇩🇿 154.255.11.157

🇻🇳 14.191.80.247

🇺🇸 13.52.239.55

🇰🇿 5.34.57.205

🇺🇸 195.214.120.171

🇦🇷 190.220.172.154

🇲🇽 189.217.102.42

🇧🇬 185.255.212.178

🇺🇸 185.92.182.129

🇺🇸 162.217.165.201

🇻🇳 116.100.121.108

🇨🇳 114.106.136.228

🇿🇦 102.129.55.82

🇳🇱 91.92.40.12

🇨🇦 85.217.149.55

🇫🇷 85.217.140.40

🇸🇬 43.173.180.204

🇺🇸 205.210.31.44