JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.36.138

104.207.36.138 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.36.138

Whois 104.207.36.138

IP Abuse Reports for 104.207.36.138:

This IP address has been reported a total of 161 times from 22 distinct sources. 104.207.36.138 was first reported on June 5th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-05-31 20:05:45 (5 days ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-05 09:38:27 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-01 23:55:57 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:42:47 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-23 13:06:16 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-19 12:38:50 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-15 11:02:24 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-04-15 11:01:15 (1 month ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-04-15 07:33:22 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-33.104.207.36.138.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-33.104.207.36.138.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇫🇷 masterguru	2026-04-13 10:13:23 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.36.138 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇪🇸 librebit	2026-03-18 03:48:25 (2 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-02-09 21:44:57 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.36.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.36.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:44:49.951590 2026] [security2:error] [pid 5929:tid 5929] [client 104.207.36.138:30507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garthp.com"] [uri "/dev/.git/config"] [unique_id "aYpVUQYJgveipDtYPFab6gAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-09 05:23:33 (3 months ago)	Forum/form spam	Web Spam
Anonymous	2025-12-08 00:13:59 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-27 04:25:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.36.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.36.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 23:25:39.378759 2025] [security2:error] [pid 27016:tid 27016] [client 104.207.36.138:41513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jimgrenier.com"] [uri "/.env"] [unique_id "aSfSw6-Robwelc_6VhshqQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.160.118.193

🇺🇦 193.176.251.229

🇨🇳 114.98.230.202

🇧🇪 34.62.36.252

🇰🇷 211.253.9.49

🇺🇸 192.227.193.165

🇧🇷 189.126.213.30

🇲🇽 186.96.145.241

🇫🇮 185.254.158.19

🇮🇩 182.253.156.184

🇨🇦 144.217.135.238

🇷🇴 80.94.95.221

🇫🇷 80.67.167.81

🇳🇱 45.148.10.157

🇷🇴 2.57.121.112

🇶🇦 178.153.92.148

🇲🇽 177.245.235.252

🇨🇳 157.18.2.84

🇭🇰 154.221.20.215

🇨🇭 104.244.74.201