JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.214

104.207.38.214 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.214

Whois 104.207.38.214

IP Abuse Reports for 104.207.38.214:

This IP address has been reported a total of 151 times from 21 distinct sources. 104.207.38.214 was first reported on June 5th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-12 05:19:00 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 00:18:53.342753 2026] [security2:error] [pid 5134:tid 5134] [client 104.207.38.214:54525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artisticheadstones.com"] [uri "/frontend/.env"] [unique_id "aY1ivQjJV44YNSvAxfLTrwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 17:32:45 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 12:32:36.534289 2026] [security2:error] [pid 9067:tid 9067] [client 104.207.38.214:23089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anywheregarden.com"] [uri "/.env"] [unique_id "aYtrtDsngHTNZZY0guc86wAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-10 06:03:37 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 Thaliruth	2026-02-10 04:32:51 (4 months ago)	[10/Feb/2026:05:32:50.969878 +0100] aYq08qlAMQ-pIO4cPOkRYAAAAA4 104.207.38.214 57302 127.0.0.1 7080 ... show more [10/Feb/2026:05:32:50.969878 +0100] aYq08qlAMQ-pIO4cPOkRYAAAAA4 104.207.38.214 57302 127.0.0.1 7080 ... show less	Hacking
🇺🇸 TPI-Abuse	2026-02-10 00:30:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:30:53.735969 2026] [security2:error] [pid 937968:tid 937988] [client 104.207.38.214:15485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettleofgold.com"] [uri "/admin/.git/config"] [unique_id "aYp8PawhT4RZ6FzCjF2s5wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:16:46 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:16:38.905979 2026] [security2:error] [pid 15801:tid 15801] [client 104.207.38.214:32211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keepingitsharp.biz"] [uri "/.env.local"] [unique_id "aYpq1qClPn9tkgCX6zSdyAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:34:40 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:34:33.770017 2026] [security2:error] [pid 18403:tid 18403] [client 104.207.38.214:40027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "macro-astrology.com"] [uri "/admin/.git/config"] [unique_id "aYpg-SqmHEZhF7ElEXbybAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-27 17:36:20 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-17 18:14:57 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.17 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-12 16:38:31 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.12 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-06 20:34:16 (7 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.06 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.06 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-29 00:29:33 (7 months ago)	GlobalProtect login attempts with user gbie.	VPN IP Brute-Force
Anonymous	2025-10-06 16:44:05 (8 months ago)	Attempted brute force login to web vpn 28 time(s); last attempt for 2025.10.06 is noted in report ti ... show more Attempted brute force login to web vpn 28 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 09:17:22 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.142.69.146

🇹🇷 185.218.245.17

🇨🇳 124.66.74.42

🇨🇭 209.99.184.143

🇺🇸 135.237.126.148

🇨🇳 122.97.215.194

🇻🇳 116.110.209.148

🇺🇸 107.173.223.229

🇧🇾 80.249.80.127

🇪🇸 80.24.1.119

🇨🇦 66.56.80.162

🇮🇱 51.16.190.127

🇸🇬 43.156.61.33

🇮🇹 31.76.113.20

🇸🇬 23.111.14.188

🇨🇦 20.116.34.103

🇬🇧 5.226.140.83

🇩🇪 213.209.159.242

🇲🇽 186.96.151.198

🇨🇳 182.138.158.117