JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.145

104.207.38.145 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.145

Whois 104.207.38.145

IP Abuse Reports for 104.207.38.145:

This IP address has been reported a total of 149 times from 16 distinct sources. 104.207.38.145 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-12 05:41:46 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇫🇷 Octopuce	2026-03-22 08:55:40 (2 months ago)	Aggressive web search of vulnerable pages: /forum.php?lng=fr%27&cat=8 /forum.php?lng=%27&cat=8 /foru ... show more Aggressive web search of vulnerable pages: /forum.php?lng=fr%27&cat=8 /forum.php?lng=%27&cat=8 /forum.php?lng=fr%22&cat=8 /forum.php?lng=%22&ca ... show less	Web App Attack
🇺🇸 Ocean Ascents	2026-01-21 16:37:24 (4 months ago)	Probe for vulnerabilities. Path attempted: /.svn/wc.db	Web App Attack
🇺🇸 myagent.site	2026-01-20 21:42:53 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇬🇧 Steve	2026-01-18 16:30:55 (4 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 08:28:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:28:26.247270 2025] [security2:error] [pid 26454:tid 26454] [client 104.207.38.145:32223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bipocmentalhealthcoalition.org"] [uri "/.svn/wc.db"] [unique_id "aS_0qhrFC9qAZXrUH-yw3wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:15:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:15:18.015071 2025] [security2:error] [pid 23682:tid 23682] [client 104.207.38.145:27513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.britishfolk.org"] [uri "/.svn/wc.db"] [unique_id "aSaa9uddjQAuZ7im7aDREwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:24:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:24:01.332036 2025] [security2:error] [pid 31067:tid 31067] [client 104.207.38.145:56853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "altansirel.osmansirel.com"] [uri "/.git/HEAD"] [unique_id "aSZkwZ4UV2DxIErizo6KYQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:28:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:28:28.376662 2025] [security2:error] [pid 21636:tid 21636] [client 104.207.38.145:15921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dutchgreenrecycling.mapleleaf-marketing.com"] [uri "/.git/HEAD"] [unique_id "aSVanDPwcA8Iommm-wnNTQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:52:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:52:53.062853 2025] [security2:error] [pid 7077:tid 7077] [client 104.207.38.145:45175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.frontlinefirestop.com"] [uri "/.env"] [unique_id "aSQc5SNc6Q1Jxn5F02LFpAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-01 11:07:46 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.01 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-27 01:38:21 (7 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.10.27 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.10.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-23 22:39:43 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.23 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.23 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-20 05:33:06 (7 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.10.20 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.10.20 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 10:40:11 (7 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 191.114.235.242

🇺🇸 184.105.139.125

🇹🇷 176.233.67.188

🇺🇸 172.208.48.177

🇮🇳 165.140.164.99

🇺🇸 66.132.172.211

🇺🇸 65.49.1.155

🇩🇪 45.135.141.22

🇨🇳 42.100.22.64

🇳🇵 27.34.70.73

🇺🇸 2a09:bac0:1000:c48::1c:35a

🇺🇸 154.92.23.249

🇮🇳 112.79.22.241

🇺🇸 96.235.170.147

🇧🇬 79.124.58.142

🇦🇱 77.242.17.42

🇷🇺 62.231.20.54

🇺🇸 54.91.161.158

🇩🇪 45.135.141.12

🇸🇦 37.106.14.25