JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.34.118

104.207.34.118 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.34.118

Whois 104.207.34.118

IP Abuse Reports for 104.207.34.118:

This IP address has been reported a total of 150 times from 28 distinct sources. 104.207.34.118 was first reported on June 4th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-10 03:07:47 (2 days ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇬🇧 Oakley	2026-04-16 20:51:36 (1 month ago)	(antiscrape_rule) Web application abuse detected 104.207.34.118 (US/United States/-): 5 in the last ... show more (antiscrape_rule) Web application abuse detected 104.207.34.118 (US/United States/-): 5 in the last 900 secs show less	Hacking
🇳🇱 jjnxpct	2026-02-20 04:54:22 (3 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /admin/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇺🇸 mnsf	2026-02-19 23:05:19 (3 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:43:20 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:43:15.459705 2026] [security2:error] [pid 7521:tid 7521] [client 104.207.34.118:24901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kimmimorikawa.com"] [uri "/wp/.git/config"] [unique_id "aZaG01n9I-vpmacGFqzEnQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:17:43 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:17:37.742936 2026] [security2:error] [pid 30596:tid 30596] [client 104.207.34.118:44839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kewlkarz.com"] [uri "/backend/.env"] [unique_id "aZaA0WBp1cFD3xTwpdO1YAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-19 02:13:22 (3 months ago)	Blocking for trying to access an exploit file: /wp/.git/config	Hacking
🇺🇸 mnsf	2026-02-18 22:06:24 (3 months ago)	Scanning/Probing (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 19:59:32 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:59:24.035463 2026] [security2:error] [pid 16220:tid 16220] [client 104.207.34.118:46627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towermedia.net"] [uri "/.env.production"] [unique_id "aZYaHPv7WcfWOwjkk4H7gQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:55:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:55:44.389109 2026] [security2:error] [pid 7487:tid 7487] [client 104.207.34.118:62019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tianabes.com"] [uri "/admin/.git/config"] [unique_id "aZYLMBqTfM9uAwJbsw-kmwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-18 13:52:11 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:48:33 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:48:24.886269 2026] [security2:error] [pid 7999:tid 7999] [client 104.207.34.118:42707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wandcompany.com"] [uri "/new/.git/config"] [unique_id "aZWnCHZkNvATOhJhCbxDqwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 KIDOS	2026-01-09 22:21:21 (5 months ago)	malicious activity	Web App Attack
🇮🇹 VHosting	2025-12-24 00:55:21 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-11 02:27:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 21:27:05.690576 2025] [security2:error] [pid 25268:tid 25268] [client 104.207.34.118:40051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goatedlottosecrets.com"] [uri "/.git/HEAD"] [unique_id "aTor-cVxmdEChijT78TarAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.86

🇺🇸 157.245.169.157

🇦🇺 144.48.38.138

🇺🇸 135.129.128.247

🇰🇷 119.198.191.180

🇺🇸 50.6.228.32

🇳🇱 45.148.10.152

🇸🇬 43.156.24.132

🇺🇸 135.232.212.164

🇨🇳 121.29.149.103

🇺🇸 69.49.246.176

🇻🇳 171.243.150.62

🇷🇴 80.94.92.186

🇺🇸 64.62.156.25

🇧🇪 198.235.24.171

🇺🇸 104.219.236.16

🇵🇱 77.83.246.97

🇨🇳 58.209.82.184

🇳🇱 45.156.128.14

🇷🇴 2.57.121.25