JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.69

104.207.38.69 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.69

Whois 104.207.38.69

IP Abuse Reports for 104.207.38.69:

This IP address has been reported a total of 143 times from 22 distinct sources. 104.207.38.69 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-13 23:26:27 (2 months ago)	Attempt to scan vulnerabilities	Hacking
Anonymous	2026-04-12 05:40:20 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇩🇪 F242	2026-01-30 06:06:03 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:54 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-24 07:32:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:32:50.596759 2025] [security2:error] [pid 26279:tid 26279] [client 104.207.38.69:40637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nationalnova.com"] [uri "/.svn/wc.db"] [unique_id "aSQKImsrjYVeO-75dv5PnQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:40:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:40:20.443001 2025] [security2:error] [pid 13943:tid 14031] [client 104.207.38.69:60779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lordennerdale.aafm.us"] [uri "/.git/HEAD"] [unique_id "aSP91Opgfj-qx9CvqmQ4VQAAAgg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:33:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:33:39.446384 2025] [security2:error] [pid 21568:tid 21568] [client 104.207.38.69:11495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.winfield-intl.com"] [uri "/.git/HEAD"] [unique_id "aSPuM-uO3oEFU7qISZWKEQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:49:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:49:36.048408 2025] [security2:error] [pid 10208:tid 10208] [client 104.207.38.69:60049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.charmainecruz.com"] [uri "/.git/HEAD"] [unique_id "aSPj4E6mE-8dF8BwkzOehgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 22:34:27 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-14 13:37:11 (8 months ago)	GlobalProtect login attempts with user rjoy.	VPN IP Brute-Force
Anonymous	2025-10-05 14:44:21 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 00:01:22 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 01:05:51 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-30 23:56:13 (8 months ago)	Attempted brute force login to web vpn 28 time(s); last attempt for 2025.09.30 is noted in report ti ... show more Attempted brute force login to web vpn 28 time(s); last attempt for 2025.09.30 is noted in report timestamp show less	Hacking Brute-Force
🇧🇷 hostseries	2025-09-29 19:32:28 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.226.197.69

🇳🇱 91.92.40.233

🇩🇪 84.16.231.135

🇻🇳 2402:800:6127:1008:c4d2:2b2b:cdbd:62db

🇨🇱 170.82.129.8

🇺🇸 134.122.125.153

🇭🇰 123.58.210.86

🇸🇬 111.119.210.146

🇳🇱 89.21.67.136

🇸🇬 47.84.105.205

🇮🇳 43.230.106.51

🇺🇸 35.196.16.197

🇮🇳 202.141.104.175

🇺🇸 167.172.148.132

🇺🇸 165.154.206.71

🇵🇱 91.192.206.188

🇮🇳 42.107.148.189

🇫🇷 2a01:e0a:dac:6e10:211:32ff:fe26:fc5

🇧🇷 185.72.241.224

🇦🇷 181.104.2.87