JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.11

104.207.39.11 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.11

Whois 104.207.39.11

IP Abuse Reports for 104.207.39.11:

This IP address has been reported a total of 86 times from 22 distinct sources. 104.207.39.11 was first reported on June 11th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-03-12 05:08:24 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 01:08:20.083184 2026] [security2:error] [pid 31296:tid 31296] [client 104.207.39.11:43157] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|comitedelafamille.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comitedelafamille.org"] [uri "/backup_2022.sql"] [unique_id "abJKRF1PxAAxZSyu_1SGhAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 10:09:26 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 05:09:20.853293 2026] [security2:error] [pid 23334:tid 23334] [client 104.207.39.11:54271] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wild-goose.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wild-goose.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgy0Ek_ZzDS8xTOx-tStwAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 07:27:38 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 myagent.site	2026-01-13 11:55:28 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-28 03:47:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 22:47:32.412343 2025] [security2:error] [pid 4739:tid 4739] [client 104.207.39.11:28385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackjobsnetwork.com"] [uri "/.env"] [unique_id "aVCoVDGWtf0BxIyg15SBiQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 19:09:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:09:11.953405 2025] [security2:error] [pid 29618:tid 29618] [client 104.207.39.11:35769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alarmnummer.com"] [uri "/.env"] [unique_id "aVAu16RbWk6L2Q4R7vIHkwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-12-27 19:04:09 (6 months ago)	trolling for resource vulnerabilities	Web App Attack
🇮🇹 VHosting	2025-12-22 22:53:51 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-29 15:57:01 (7 months ago)	botnet	DDoS Attack
Anonymous	2025-11-24 10:02:00 (7 months ago)	GET /.svn/wc.db HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:54:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:54:29.011077 2025] [security2:error] [pid 10144:tid 10144] [client 104.207.39.11:25755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.icesoft.blog"] [uri "/.env"] [unique_id "aSQPNV0soNI9oUjKqb-GvwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:58:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:58:20.418456 2025] [security2:error] [pid 20579:tid 20579] [client 104.207.39.11:46995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cajunfriedturkey.com"] [uri "/.env"] [unique_id "aSPl7LmSJnyaUNsRheWX4QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:06:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:06:51.098145 2025] [security2:error] [pid 17450:tid 17450] [client 104.207.39.11:46341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hal.dance"] [uri "/.env"] [unique_id "aSPZ28GVuydcALi5-lPzZwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2025-11-22 21:12:42 (7 months ago)	Form spam	Web Spam

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 166.62.102.109

🇺🇸 165.154.202.146

🇺🇸 164.90.156.35

🇳🇱 45.148.10.152

🇺🇸 44.167.97.245

🇺🇸 37.140.223.146

🇨🇭 179.43.150.26

🇧🇷 177.53.165.251

🇫🇷 91.196.152.218

🇫🇷 85.217.140.50

🇳🇱 77.83.39.94

🇮🇶 65.20.133.208

🇮🇳 49.207.40.162

🇳🇱 45.148.10.37

🇺🇸 44.204.27.105

🇺🇸 44.34.254.45

🇨🇳 36.250.220.223

🇷🇺 178.178.222.58

🇧🇷 177.174.0.3

🇳🇱 88.151.32.100