JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.116

104.207.39.116 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 48%: ?

48%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.116

Whois 104.207.39.116

IP Abuse Reports for 104.207.39.116:

This IP address has been reported a total of 157 times from 32 distinct sources. 104.207.39.116 was first reported on June 11th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-06-29 12:15:39 (2 weeks ago)	(y4) Failed scan -byebye- from 104.207.39.116 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 Tilellit.PRO	2026-06-27 09:31:14 (2 weeks ago)	Fail2Ban banned 104.207.39.116 for security violations in jail wp-armour. Log: 2026/06/27 09:31:14 [ ... show more Fail2Ban banned 104.207.39.116 for security violations in jail wp-armour. Log: 2026/06/27 09:31:14 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.39.116 \| Target: wplogin" , client: 104.207.39.116, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇮 6kilowatti	2026-06-26 08:51:13 (3 weeks ago)	104.207.39.116 - - [26/Jun/2026:11:51:12 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6 ... show more 104.207.39.116 - - [26/Jun/2026:11:51:12 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" 104.207.39.116 - [26/Jun/2026:11:51:12 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" ... show less	Web App Attack
🇬🇷 setupgr	2026-06-25 07:31:20 (3 weeks ago)	(WPLOGIN) WP Login Attack 104.207.39.116 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH- ... show more (WPLOGIN) WP Login Attack 104.207.39.116 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 104.207.39.116 - - [25/Jun/2026:10:30:29 +0300] "POST /wp-login.php HTTP/1.1" 503 7446 "https://sea-sound.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Port Scan
🇬🇷 setupgr	2026-06-25 04:57:43 (3 weeks ago)	(mod_security) mod_security (id:900001) triggered by 104.207.39.116 (US/United States/Virginia/Ashbu ... show more (mod_security) mod_security (id:900001) triggered by 104.207.39.116 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 07:57:42.159544 2026] [security2:error] [pid 358185:tid 358274] [client 104.207.39.116:29819] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "mail.babis.photo"] [uri "/wp-login.php"] [unique_id "ajy1RjpPCootS5mrGd6lGAAAAYA"], referer: https://mail.babis.photo/wp-login.php show less	Port Scan
🇳🇱 GabrielJST	2026-06-25 04:06:15 (3 weeks ago)	(wordpress) Failed wordpress login from 104.207.39.116 (US/United States/-)	Brute-Force
🇫🇷 ELYAZ	2026-06-24 17:38:15 (3 weeks ago)	(y4) Failed scan -byebye- from 104.207.39.116 (US/United States/-): (CF_ENABLE)	Hacking
🇱🇻 garmtech.com	2026-06-24 17:16:12 (3 weeks ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇩🇪 Spiderpiggy	2026-06-23 17:15:27 (3 weeks ago)	Automatically reported via Blackhole honeypot on games4you.be. Attempted access to restricted endpoi ... show more Automatically reported via Blackhole honeypot on games4you.be. Attempted access to restricted endpoint: /wp-login.php show less	Brute-Force Bad Web Bot SSH
🇩🇪 london2038.com	2026-06-22 10:43:08 (3 weeks ago)	Detected by WP fail2ban 2026-06-22T12:43:08.077847+02:00 wordpress: Authentication attempt from 104. ... show more Detected by WP fail2ban 2026-06-22T12:43:08.077847+02:00 wordpress: Authentication attempt from 104.207.39.116 show less	Brute-Force Web App Attack
Anonymous	2026-06-20 18:05:56 (3 weeks ago)	[server.tmg.gr] httpd-login-spray-site: sites=hacm.gr; logs=/var/log/httpd/domains/hacm.gr.log; samp ... show more [server.tmg.gr] httpd-login-spray-site: sites=hacm.gr; logs=/var/log/httpd/domains/hacm.gr.log; samples=site_wide=true \| distinct_ips=13 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 pm33	2026-06-20 03:18:10 (3 weeks ago)	Wordpress login attempts	Brute-Force
🇫🇷 ELYAZ	2026-06-19 14:42:23 (4 weeks ago)	(y4) Failed scan -byebye- from 104.207.39.116 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 mrcrassi	2026-06-17 16:04:51 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 ELYAZ	2026-06-17 09:43:26 (1 month ago)	(y4) Failed scan -byebye- from 104.207.39.116 (US/United States/-): (CF_ENABLE)	Hacking

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.9.38.117

🇦🇷 190.220.172.154

🇧🇷 179.125.130.92

🇺🇸 147.185.132.38

🇺🇸 66.132.224.92

🇫🇷 51.68.236.71

🇳🇱 45.148.10.183

🇳🇱 45.148.10.147

🇫🇮 31.76.77.218

🇮🇹 2a05:d01a:5b1:e201:36b0:5745:b3b0:bf17

🇮🇩 2001:448a:a071:c50:c1bb:b0f7:4a17:bf6

🇧🇪 198.235.24.131

🇨🇴 190.85.11.150

🇺🇸 142.93.1.90

🇺🇸 104.234.53.198

🇨🇦 85.217.149.52

🇵🇱 176.53.159.197

🇨🇳 123.232.133.145

🇧🇩 103.86.198.162

🇺🇸 65.49.1.129