JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.136

104.207.38.136 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.136

Whois 104.207.38.136

IP Abuse Reports for 104.207.38.136:

This IP address has been reported a total of 155 times from 23 distinct sources. 104.207.38.136 was first reported on June 11th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Mga Admin	2026-06-01 16:51:45 (3 days ago)	104.207.38.136 - - [01/Jun/2026:23:51:40 +0700] "GET /sitemap.xml HTTP/1.1" 404 69 "-" "Mozilla/5.0" ... show more 104.207.38.136 - - [01/Jun/2026:23:51:40 +0700] "GET /sitemap.xml HTTP/1.1" 404 69 "-" "Mozilla/5.0" ... show less	Web App Attack
🇳🇱 MatStef132	2026-05-19 20:59:02 (2 weeks ago)	MatShield L7: blocked on dstat.selify.io (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-19 20:55:42 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-14 22:03:10 (3 weeks ago)	MatShield L7 blocked request to mathost.eu for reason ua-q	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-05-14 21:32:37 (3 weeks ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-04-28 15:44:20 (1 month ago)	Cloudflare WAF: Request Path: /123456 Request Query: ?msclkid=Bo1X3VIU-9IYs-67S6-B9Ahr4pOr5q0 Host: ... show more Cloudflare WAF: Request Path: /123456 Request Query: ?msclkid=Bo1X3VIU-9IYs-67S6-B9Ahr4pOr5q0 Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: block Source: ratelimit ASN Description: 3xK Tech GmbH Country: US Method: GET Timestamp: 2026-04-28T15:44:20Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇭 4server	2026-04-15 23:37:53 (1 month ago)	[ThuApr1601:37:51.5606302026][security2:error][pid2087123:tid2087128][client104.207.38.136:0]ModSecu ... show more [ThuApr1601:37:51.5606302026][security2:error][pid2087123:tid2087128][client104.207.38.136:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"345\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.giuristifriburgo.ch\"][uri\"/xmlrpc.php\"][unique_id\"aeAhT45cwJUc7gZE604iaQAAAMM\"] show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-04-03 04:49:48 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-49.104.207.38.136.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-49.104.207.38.136.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-07 15:27:39 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 10:27:32.121297 2026] [security2:error] [pid 25955:tid 25955] [client 104.207.38.136:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antitribu.com"] [uri "/.env"] [unique_id "aV57ZFd-YefvA6btZY4UCwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dewoda	2026-01-05 01:41:40 (5 months ago)	Blocked by UFW on htzded01 [80/tcp] Source port: 17641 TTL: 42 Packet length: 60 TOS: 0x00 This rep ... show more Blocked by UFW on htzded01 [80/tcp] Source port: 17641 TTL: 42 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2025-12-31 17:49:27 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-29 04:39:37 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:39:34.295901 2025] [security2:error] [pid 9803:tid 9815] [client 104.207.38.136:24353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beckmon.com"] [uri "/.env"] [unique_id "aVIGBtoUX5-H0h2mWyyTCgAAAMk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (5 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-25 23:04:01 (6 months ago)	botnet	DDoS Attack
🇺🇸 nowyouknow	2025-11-24 14:38:53 (6 months ago)	(From [email protected]) Hello skyparkchiro.com Administrator. If your site feels more like ... show more (From [email protected]) Hello skyparkchiro.com Administrator. If your site feels more like a brochure than a booking engine, you’re leaving money on the table. We help businesses like yours convert clicks into customers by: • Making your site work harder for you • Building pages that convert, not just look good • Removing friction for mobile users • Boosting SEO for local intent • Giving you clarity on ROI Clients often see double the conversions without spending more on ads. We’ve developed a thriving community of 100,000+ business owners who’ve elevated their online presence, and USA Wire recently recognized our expertise in helping small businesses reach measurable growth. Interested in a no-cost SEO check-up and strategy roadmap? You’ll get practical insights you can apply immediately. P.S. If your conversion rate is under 2%, you’re leaving money on the table. Talk soon, show less	Phishing Web Spam

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.70.139.75

🇬🇧 193.176.29.21

🇺🇸 165.171.148.234

🇮🇳 157.20.215.123

🇨🇿 31.222.6.154

🇳🇱 5.61.209.33

🇨🇳 223.85.102.135

🇩🇪 213.209.159.56

🇨🇳 182.113.40.7

🇧🇷 179.42.57.136

🇺🇸 172.203.190.132

🇻🇳 27.64.70.104

🇧🇷 200.155.66.2

🇺🇸 192.3.185.194

🇨🇦 138.197.161.151

🇮🇹 93.33.32.183

🇩🇪 212.227.88.225

🇨🇴 191.110.200.48

🇫🇮 147.185.133.62

🇺🇸 74.87.117.149