JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.34.202

104.207.34.202 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.34.202

Whois 104.207.34.202

IP Abuse Reports for 104.207.34.202:

This IP address has been reported a total of 150 times from 20 distinct sources. 104.207.34.202 was first reported on June 11th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-05-16 22:16:27 (2 weeks ago)	104.207.34.202 - - [17/May/2026:00:16:27 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 104.207.34.202 - - [17/May/2026:00:16:27 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Hacking Web App Attack
🇺🇸 nowyouknow	2026-05-16 01:39:28 (3 weeks ago)	(From [email protected]) Hi Rubin Family Chiropractic, I wanted to bump this in cas ... show more (From [email protected]) Hi Rubin Family Chiropractic, I wanted to bump this in case you missed it — I built an AI agent just for Rubin Family Chiropractic, trained on your website, Google info, and everything I could find. It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part. Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee. Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
Anonymous	2026-04-18 01:29:11 (1 month ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-03-12 20:22:40 (2 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:59 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-27 13:08:21 (5 months ago)	2025-12-27T15:08:20.858977+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt ... show more 2025-12-27T15:08:20.858977+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt for [email protected] from 104.207.34.202 ... show less	Web App Attack
🇩🇪 Carsten	2025-11-25 11:05:55 (6 months ago)	GET [.svn/wc.db]	Port Scan
🇺🇸 TPI-Abuse	2025-11-25 07:18:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:17:54.147783 2025] [security2:error] [pid 948:tid 948] [client 104.207.34.202:58581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sfholidayrentals.com"] [uri "/.env"] [unique_id "aSVYIvwEBHt1els1IbwR8QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:54:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:54:43.289217 2025] [security2:error] [pid 28823:tid 28841] [client 104.207.34.202:14173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.davidholls.com"] [uri "/.env"] [unique_id "aSUogxofziXAQoCfqJVfAQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:06:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:36.731913 2025] [security2:error] [pid 6030:tid 6030] [client 104.207.34.202:10183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.gslandservices.com"] [uri "/.git/HEAD"] [unique_id "aSUPLL6k4icvkYDVctjSewAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:21:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.34.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:21:14.294667 2025] [security2:error] [pid 31838:tid 31838] [client 104.207.34.202:33883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jazziiafoundation.org"] [uri "/.svn/wc.db"] [unique_id "aSUEijux50bDbSG_KoywtAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-25 00:20:06 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
Anonymous	2025-11-14 01:44:21 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-29 10:48:00 (7 months ago)	GlobalProtect login attempts with user smsservicen.	VPN IP Brute-Force
Anonymous	2025-10-26 13:17:47 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.229

🇻🇳 160.187.147.124

🇮🇪 54.195.191.219

🇫🇷 31.220.75.209

🇳🇱 176.65.139.66

🇨🇦 162.219.178.250

🇺🇸 162.216.150.24

🇫🇷 92.103.134.183

🇷🇺 80.78.245.233

🇷🇺 46.191.185.151

🇵🇰 205.164.134.176

🇺🇸 172.236.117.243

🇰🇷 121.66.37.108

🇮🇳 115.247.159.106

🇲🇲 37.111.53.110

🇺🇸 2a02:4780:b:1919:0:17c9:c011:1

🇨🇳 124.117.195.118

🇨🇳 117.40.113.224

🇨🇦 69.49.112.72

🇨🇳 60.172.168.136