JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.43

104.207.38.43 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.43

Whois 104.207.38.43

IP Abuse Reports for 104.207.38.43:

This IP address has been reported a total of 135 times from 17 distinct sources. 104.207.38.43 was first reported on June 4th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-18 22:00:34 (4 weeks ago)	Auto-ban: >3000 req/min op 2026-05-18	Web App Attack SSH Hacking
🇪🇸 librebit	2026-05-17 04:21:56 (4 weeks ago)	Brute force	Brute-Force
🇬🇧 PeravixGroup	2026-05-08 01:44:38 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-11-24 09:02:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:02:28.209817 2025] [security2:error] [pid 17448:tid 17448] [client 104.207.38.43:50843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thingstodonude.com"] [uri "/.env"] [unique_id "aSQfJLoX8ptdnbkzzWb8sgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:04:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:03:47.326429 2025] [security2:error] [pid 4018:tid 4018] [client 104.207.38.43:31129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinkrays.michaelholdengc.com"] [uri "/.git/HEAD"] [unique_id "aSQRY0U8i-Hr1Q0iaDxO-AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:27:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:27:12.059472 2025] [security2:error] [pid 32211:tid 32211] [client 104.207.38.43:22755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rescuedpekes.com"] [uri "/.env"] [unique_id "aSP6wMaohmbNGyZWqmY6gAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:25:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:25:07.959903 2025] [security2:error] [pid 2895:tid 2895] [client 104.207.38.43:27847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.personalized-holiday-cards.com"] [uri "/.env"] [unique_id "aSPsM7pHLQMoZx29P_B8QwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:43:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:42:57.926498 2025] [security2:error] [pid 4314:tid 4314] [client 104.207.38.43:13491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.personal-sportswear.com"] [uri "/.git/HEAD"] [unique_id "aSPiUeRwa3xbpagvoekm5QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 20:16:43 (7 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 104 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 104.207.38.43 (US/United States/-) show less	Brute-Force
Anonymous	2025-10-17 20:18:37 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 03:23:13 (7 months ago)	GlobalProtect login attempts with user cbellinger.	VPN IP Brute-Force
Anonymous	2025-10-01 20:16:02 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-28 02:19:44 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.28 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.28 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-27 18:36:06 (8 months ago)	Attempted brute force login to web vpn 81 time(s); last attempt for 2025.09.27 is noted in report ti ... show more Attempted brute force login to web vpn 81 time(s); last attempt for 2025.09.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 21:08:52 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.11.130.213

🇭🇰 43.103.100.177

🇹🇭 202.183.141.133

🇭🇰 199.45.155.88

🇺🇸 192.210.236.57

🇧🇷 189.23.157.254

🇳🇱 176.65.132.17

🇩🇪 167.172.166.5

🇺🇸 162.216.149.221

🇯🇵 160.251.197.41

🇨🇦 159.89.114.60

🇸🇬 156.245.144.121

🇧🇷 147.15.20.173

🇮🇳 143.110.177.177

🇮🇳 135.235.138.43

🇮🇳 122.162.146.24

🇨🇳 117.34.85.168

🇩🇪 116.203.220.114

🇮🇳 115.96.168.56

🇨🇳 111.198.221.98