JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.34.189

104.207.34.189 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.34.189

Whois 104.207.34.189

IP Abuse Reports for 104.207.34.189:

This IP address has been reported a total of 140 times from 26 distinct sources. 104.207.34.189 was first reported on June 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-16 20:53:58 (1 month ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (X11; CrOS x86_ ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-03-16 09:44:43 (2 months ago)	Brute force	Brute-Force
Anonymous	2026-03-10 19:09:04 (3 months ago)	(wordpress) Failed wordpress login from 104.207.34.189 (US/United States/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-01-15 01:12:07 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 20:11:59.658586 2026] [security2:error] [pid 21712:tid 21712] [client 104.207.34.189:28965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowhead30.com"] [uri "/.svn/wc.db"] [unique_id "aWg-34ygN41foWcPUIIphAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 12:34:02 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:33:56.428178 2026] [security2:error] [pid 11836:tid 11836] [client 104.207.34.189:56681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackstarmgmt.com"] [uri "/.env"] [unique_id "aWY7tHbI7pHSg35a5j_rmwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Steve	2025-12-09 09:36:37 (6 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
Anonymous	2025-11-30 19:04:58 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 06:09:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:08:57.476715 2025] [security2:error] [pid 3906:tid 3906] [client 104.207.34.189:50579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mprise.com"] [uri "/.svn/wc.db"] [unique_id "aSVH-QYrhccy1bUSkYdx-AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 06:56:54 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-14 07:16:48 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-07 10:02:42 (7 months ago)	wordpress-trap	Web App Attack
🇨🇦 wil.com	2025-10-29 02:59:43 (7 months ago)	GlobalProtect login attempts with user labraswell.	VPN IP Brute-Force
🇨🇦 wil.com	2025-10-28 23:26:42 (7 months ago)	GlobalProtect login attempts with user coronaperezp.	VPN IP Brute-Force
Anonymous	2025-10-24 10:59:45 (7 months ago)	(sshd) Failed SSH login from 104.207.34.189 (US/United States/-): 1 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 104.207.34.189 (US/United States/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 24 03:59:38 srv8 sshd[687748]: Invalid user romchris from 104.207.34.189 port 43725 show less	Brute-Force
🇮🇹 Rosh	2025-10-24 03:56:02 (7 months ago)	[10/24/25 05:56:02] SSH: illegal login attempts	Brute-Force SSH

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.85

🇮🇳 128.185.254.162

🇲🇴 125.31.4.70

🇮🇳 122.166.49.42

🇯🇵 118.194.229.94

🇺🇸 104.152.52.100

🇿🇦 102.134.0.10

🇫🇷 91.231.89.116

🇳🇱 45.142.193.164

🇳🇱 5.187.35.26

🇩🇪 213.209.159.242

🇭🇰 203.186.60.250

🇺🇸 198.11.178.150

🇲🇽 189.188.44.183

🇳🇱 176.65.139.63

🇺🇸 104.152.52.227

🇭🇰 101.36.122.139

🇩🇪 69.5.169.92

🇺🇸 65.49.1.159

🇷🇴 2.57.121.112