JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.96

104.207.38.96 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.96

Whois 104.207.38.96

IP Abuse Reports for 104.207.38.96:

This IP address has been reported a total of 137 times from 14 distinct sources. 104.207.38.96 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Phenix Info	2026-01-21 09:53:26 (4 months ago)	SmallGuard.fr/Prestashop Forbidden Ext.	Web App Attack
🇵🇱 sefinek.net	2026-01-16 01:34:29 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-24 09:00:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:00:36.858827 2025] [security2:error] [pid 4148:tid 4148] [client 104.207.38.96:33851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.opticasprisma.com"] [uri "/.svn/wc.db"] [unique_id "aSQetGU5abcHkMpLuUfNvAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:15:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:15:02.806109 2025] [security2:error] [pid 7501:tid 7501] [client 104.207.38.96:47837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.smartradios.info"] [uri "/.git/HEAD"] [unique_id "aSQUBte9gbHCJ9p6rzQm2QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:22:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:22:26.967223 2025] [security2:error] [pid 23182:tid 23182] [client 104.207.38.96:11441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idahopictures.com"] [uri "/.git/HEAD"] [unique_id "aSP5ohbPhFMvw4XIMewbBQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:32:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:20.497188 2025] [security2:error] [pid 20156:tid 20156] [client 104.207.38.96:54975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jessmay.com"] [uri "/.svn/wc.db"] [unique_id "aSPf1PCDqchwYnKmSJQcvAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 21:40:33 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-07 08:54:08 (6 months ago)	[redacted] 104.207.38.96 - - [07/Nov/2025:09:53:53 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "M ... show more [redacted] 104.207.38.96 - - [07/Nov/2025:09:53:53 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/601.5.17 (KHTML, like Gecko) Version/9.1 Safari/601.5.17" [redacted] 104.207.38.96 - - [07/Nov/2025:09:53:54 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_5 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G36" [redacted] 104.207.38.96 - - [07/Nov/2025:09:53:55 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_2_1 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5" [redacted] 104.207.38.96 - - [07/Nov/2025:09:53:58 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (Linux; Android 8.0.0; WAS-LX3 Build/HUAWEIWAS-LX3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36" [redacted] 104.207.38.96 - - [07/Nov/2025:0 ... show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2025-10-29 17:45:34 (7 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2025-10-26 19:50:12 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-21 18:19:07 (7 months ago)	Attempted brute force login to web vpn 14 time(s); last attempt for 2025.10.21 is noted in report ti ... show more Attempted brute force login to web vpn 14 time(s); last attempt for 2025.10.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-20 21:20:07 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.20 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.20 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 21:07:34 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-16 21:42:36 (7 months ago)	GlobalProtect login attempts with user jjsparks.	VPN IP Brute-Force
Anonymous	2025-10-15 06:54:38 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.10.15 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.10.15 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 196.192.181.202

🇨🇷 186.32.221.90

🇺🇸 162.216.150.159

🇭🇰 162.158.193.32

🇺🇸 66.132.172.153

🇳🇱 45.148.146.52

🇧🇷 38.211.42.85

🇬🇧 2a06:4880:c000::eb

🇳🇱 192.142.24.60

🇺🇸 185.255.100.198

🇫🇮 147.185.133.226

🇹🇼 110.25.112.149

🇨🇳 101.96.202.144

🇺🇸 47.85.8.171

🇧🇪 34.79.83.135

🇷🇺 194.190.153.226

🇲🇽 187.157.84.102

🇨🇿 172.68.213.186

🇿🇦 147.136.65.73

🇨🇳 120.48.60.44