JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.36.215

104.207.36.215 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.36.215

Whois 104.207.36.215

IP Abuse Reports for 104.207.36.215:

This IP address has been reported a total of 138 times from 22 distinct sources. 104.207.36.215 was first reported on June 8th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-23 18:31:23 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-31.104.207.36.215.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-31.104.207.36.215.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-18 12:11:19 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-11.104.207.36.215.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-11.104.207.36.215.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇩 Burayot	2026-01-20 13:50:52 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.36.215 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.36.215 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-12 06:38:33 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 LRob.fr	2026-01-05 16:50:35 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇦🇺 oncord	2026-01-03 20:51:24 (5 months ago)	Form spam	Web Spam
Anonymous	2025-12-27 13:51:18 (5 months ago)	botnet	DDoS Attack
🇺🇸 Psycho Solutions LLC	2025-12-23 17:21:41 (5 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 12/23/2025 5:21 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇲🇹 Malta	2025-12-18 17:33:45 (5 months ago)	104.207.36.215 - - [18/Dec/2025:18:33:44 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.207.36.215 - - [18/Dec/2025:18:33:44 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	VPN IP Hacking Web App Attack
🇩🇪 stinpriza	2025-12-18 03:31:07 (5 months ago)	Web App Attack	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-09 17:06:12 (6 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 nowyouknow	2025-12-07 03:32:28 (6 months ago)	(From [email protected]) Want to increase sigafoosejackson.com visibility ... show more (From [email protected]) Want to increase sigafoosejackson.com visibility and visitors? Start exploring: https://rb.gy/p82gvr show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-25 07:29:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.36.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.36.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:28:59.643634 2025] [security2:error] [pid 23937:tid 23937] [client 104.207.36.215:52279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chrisswansoncampaign.com"] [uri "/.git/HEAD"] [unique_id "aSVau5VDgMjqONqF3x3S5gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:20:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.36.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.36.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:20:19.837840 2025] [security2:error] [pid 31262:tid 31262] [client 104.207.36.215:18189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wintercypher.com"] [uri "/.git/HEAD"] [unique_id "aSVKoy3kqx4Ksqln--rqVAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:55:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.36.215 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.36.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:55:27.801745 2025] [security2:error] [pid 2245:tid 2245] [client 104.207.36.215:14215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dukemason.com"] [uri "/.git/HEAD"] [unique_id "aSU2v3jKXNfI8fSjUFPKfQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.96

🇨🇳 182.247.92.88

🇺🇸 172.252.13.90

🇬🇧 162.158.33.208

🇹🇭 147.50.227.79

🇨🇳 120.48.77.176

🇨🇳 118.126.108.11

🇺🇸 66.132.195.75

🇺🇸 40.124.184.7

🇬🇧 35.203.211.45

🇬🇧 194.50.235.150

🇨🇦 104.239.41.164

🇻🇳 103.200.25.198

🇧🇩 103.119.94.10

🇫🇷 85.217.140.45

🇦🇺 46.203.226.85

🇳🇱 45.148.10.141

🇺🇸 216.86.129.247

🇨🇴 181.234.36.73

🇧🇷 179.148.15.181