JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.230

104.207.38.230 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.230

Whois 104.207.38.230

IP Abuse Reports for 104.207.38.230:

This IP address has been reported a total of 146 times from 18 distinct sources. 104.207.38.230 was first reported on June 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 ygb	2026-05-21 08:20:06 (1 month ago)	Blocked at layer 5 after 1 attempts	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-11 09:12:26 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-10 14:18:57 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-05-09 06:02:19 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:42:42 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-25 11:15:35 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-19 11:57:26 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-18 14:46:26 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.38.230 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-04-16 13:43:13 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-01-27 16:49:01 (4 months ago)	2026-01-27T18:49:01.087223+02:00 zanati wp(www.sahpa.co.za)[786175]: Blocked authentication attempt ... show more 2026-01-27T18:49:01.087223+02:00 zanati wp(www.sahpa.co.za)[786175]: Blocked authentication attempt for [email protected] from 104.207.38.230 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-07 15:55:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 10:55:24.132370 2026] [security2:error] [pid 22542:tid 22542] [client 104.207.38.230:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barryherbach.com"] [uri "/.env"] [unique_id "aV6B7MkLk9Y8kZUfpL13jwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:25:04 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:24:55.298042 2025] [security2:error] [pid 1276438:tid 1276438] [client 104.207.38.230:40819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirandateamevents.com"] [uri "/.svn/wc.db"] [unique_id "aVIet9B50j0eCW0P-WamygAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:48:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:48:39.636246 2025] [security2:error] [pid 8198:tid 8198] [client 104.207.38.230:47935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eye7graphics.com"] [uri "/.svn/wc.db"] [unique_id "aVIWN6vUb3ycfiX69pQqQAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 17:36:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 12:35:57.380730 2025] [security2:error] [pid 11640:tid 11640] [client 104.207.38.230:14849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omnithermal.com"] [uri "/.env"] [unique_id "aThd_XYPjxzGX4wOMP1tRgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.71.172.57

🇷🇺 152.32.227.252

🇱🇹 141.98.11.129

🇺🇸 141.11.88.14

🇵🇰 119.156.28.157

🇲🇾 117.53.155.161

🇺🇸 57.151.105.130

🇷🇴 2.57.122.177

🇺🇸 2001:470:1:c84::60

🇹🇷 213.128.70.19

🇰🇷 211.223.107.86

🇳🇱 193.176.31.205

🇻🇪 154.62.127.122

🇭🇰 123.58.213.128

🇺🇸 107.150.101.175

🇧🇷 45.229.91.34

🇬🇧 35.203.210.224

🇧🇪 35.195.211.250

🇺🇸 216.244.66.241

🇳🇱 193.176.31.227