JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.122

104.207.39.122 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.122

Whois 104.207.39.122

IP Abuse Reports for 104.207.39.122:

This IP address has been reported a total of 151 times from 26 distinct sources. 104.207.39.122 was first reported on June 13th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-23 05:36:46 (1 week ago)	Web App Attack	Web App Attack
🇨🇳 Peter Yu	2026-06-13 15:00:27 (3 weeks ago)		Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-06-11 11:53:07 (3 weeks ago)	Web App Attack	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇳🇱 TCATERDSBE	2026-03-23 16:06:00 (3 months ago)	SQL Injection	SQL Injection
🇫🇷 COMAITE	2026-02-06 02:39:32 (4 months ago)	Common web attack from 104.207.39.122.	Web App Attack
🇦🇺 oncord	2026-01-02 20:56:21 (6 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-24 09:59:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:59:07.792359 2025] [security2:error] [pid 16942:tid 16942] [client 104.207.39.122:30597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brentsagnotti.com"] [uri "/.svn/wc.db"] [unique_id "aSQsaw0WKn_p15r53vwdMwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:08:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:08:11.167301 2025] [security2:error] [pid 15758:tid 15758] [client 104.207.39.122:16345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allseniorsolutions.com"] [uri "/.git/HEAD"] [unique_id "aSP2S7k40mMly__h47-JKAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:37:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:37:38.769011 2025] [security2:error] [pid 3356732:tid 3356732] [client 104.207.39.122:23057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "central-wi-coal-sales.hemihauling.com"] [uri "/.svn/wc.db"] [unique_id "aSPvIo9MvXhcKpHWAYihfgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:08:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:07:58.227999 2025] [security2:error] [pid 14821:tid 14821] [client 104.207.39.122:23257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.trafficstopper.com"] [uri "/.git/HEAD"] [unique_id "aSPoLgvgx0-XJZB7WtvH_AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-11-17 02:03:41 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-14 20:25:21 (7 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 104 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 104.207.39.122 (US/United States/-) show less	Brute-Force
🇺🇸 octageeks.com	2025-11-13 05:08:43 (7 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2025-11-12 16:06:30 (7 months ago)	botnet	DDoS Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 196.203.231.220

🇳🇱 92.63.197.5

🇧🇷 45.140.192.187

🇺🇸 34.197.163.139

🇺🇸 2604:a880:2:d1:0:1:51e2:4001

🇹🇭 203.154.158.195

🇺🇸 181.215.182.32

🇨🇳 180.95.238.247

🇻🇳 171.234.13.183

🇩🇪 158.101.161.27

🇮🇳 103.207.9.246

🇸🇬 103.20.122.54

🇹🇷 94.138.209.214

🇮🇳 2400:6180:100:d0:0:1:4774:f001

🇺🇸 173.255.221.22

🇻🇳 171.244.185.149

🇵🇱 23.230.91.94

🇺🇸 20.169.107.229

🇩🇪 213.209.159.228

🇺🇸 149.72.121.119