JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.114

104.207.38.114 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 34%: ?

34%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.114

Whois 104.207.38.114

IP Abuse Reports for 104.207.38.114:

This IP address has been reported a total of 140 times from 24 distinct sources. 104.207.38.114 was first reported on June 4th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2026-06-25 12:38:01 (3 days ago)	Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST c ... show more Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST counter 1 is greater than GET counter 0, captcha counter for /wp-login.php by 104.207.38.114. show less	Web Spam
🇬🇷 setupgr	2026-06-25 03:17:58 (3 days ago)	(mod_security) mod_security (id:900001) triggered by 104.207.38.114 (US/United States/Virginia/Ashbu ... show more (mod_security) mod_security (id:900001) triggered by 104.207.38.114 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 06:17:53.093367 2026] [security2:error] [pid 358185:tid 358296] [client 104.207.38.114:15367] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ajyd4TpPCootS5mrGd6cnwAAAZU"], referer: https://villa-izabela.com/wp-login.php show less	Port Scan
🇨🇭 4server	2026-06-25 01:52:38 (4 days ago)	[ThuJun2503:52:35.5160292026][security2:error][pid1297395:tid1297417][client104.207.38.114:0]ModSecu ... show more [ThuJun2503:52:35.5160292026][security2:error][pid1297395:tid1297417][client104.207.38.114:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"giuristifriburgo.ch\"][uri\"/wp-login.php\"][unique_id\"ajyJ40StvM0wrEPIveTFIwAAAFI\"]\,referer:https://giuristifriburgo.ch/wp-login.php show less	Hacking Web App Attack
🇬🇧 spamverify.com	2026-06-25 01:10:18 (4 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-18 21:59:54 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-18	Web App Attack SSH Hacking
🇪🇸 librebit	2026-05-17 04:01:50 (1 month ago)	Brute force	Brute-Force
🇲🇹 Malta	2026-05-16 22:19:26 (1 month ago)	104.207.38.114 - - [17/May/2026:00:19:25 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.207.38.114 - - [17/May/2026:00:19:25 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
🇩🇪 F242	2026-01-30 05:35:03 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇮🇹 alph44	2025-12-31 07:42:50 (5 months ago)	WordPress attack detected by fail2ban: 3 failed attempts	Web App Attack
🇮🇹 VHosting	2025-12-23 23:45:27 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-14 01:13:11 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-29 02:18:24 (8 months ago)	GlobalProtect login attempts with user tmtoliver.	VPN IP Brute-Force
Anonymous	2025-10-11 07:55:31 (8 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 17:59:02 (8 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 15:55:20 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 203.142.160.143

🇧🇪 198.235.24.211

🇬🇧 193.163.125.75

🇺🇸 71.115.235.114

🇺🇸 64.227.109.52

🇺🇸 64.23.138.60

🇰🇷 59.16.212.232

🇨🇳 220.189.204.218

🇻🇳 180.93.32.181

🇺🇸 172.239.62.109

🇮🇩 165.154.150.65

🇺🇸 135.237.127.190

🇳🇱 45.148.10.147

🇳🇱 45.148.10.141

🇻🇪 38.248.163.108

🇮🇳 34.126.212.43

🇸🇬 34.87.117.155

🇫🇮 31.76.77.218

🇺🇸 20.127.220.21

🇮🇳 14.194.125.58