JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.152

104.207.39.152 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.152

Whois 104.207.39.152

IP Abuse Reports for 104.207.39.152:

This IP address has been reported a total of 163 times from 23 distinct sources. 104.207.39.152 was first reported on June 7th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-04-30 07:39:57 (1 month ago)	(From [email protected]) Hi, Real quick… I recently launched a FREE giveaway, and kept on ... show more (From [email protected]) Hi, Real quick… I recently launched a FREE giveaway, and kept one open for you. Lock your entry here before it wraps up: https://suniljaindvg.systeme.io/6850adaf Someone will win this… why can’t it be you? If you’d rather stop receiving additional emails from me, please complete the form on my site show less	Phishing Web Spam
Anonymous	2026-04-12 05:48:12 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇱🇻 garmtech.com	2026-03-14 21:04:38 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-04.104.207.39.152.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-04.104.207.39.152.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 11:04:32 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 06:04:25.244105 2026] [security2:error] [pid 3705:tid 3736] [client 104.207.39.152:22477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asipm.aafm.us"] [uri "/.git/config"] [unique_id "aZ2FuSnL8HMWHS6vlO5QfwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 11:57:27 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 06:57:22.385047 2026] [security2:error] [pid 7696:tid 7696] [client 104.207.39.152:33183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wiro.am.greighhouse.com"] [uri "/.git/config"] [unique_id "aZxAoiRXttNV53X3oxIvbQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-19 02:53:53 (4 months ago)	Blocking for trying to access an exploit file: /backup/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-19 01:49:32 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:49:26.689585 2026] [security2:error] [pid 16306:tid 16306] [client 104.207.39.152:54697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karinproctor.com"] [uri "/admin/.env"] [unique_id "aZZsJu-osSYm1NPyrym9QAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:28:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:28:24.084205 2026] [security2:error] [pid 14869:tid 14869] [client 104.207.39.152:25777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "von-s.com"] [uri "/.env.production"] [unique_id "aZZZKAuJGVejGSVvCgTzIQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:35:42 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:35:29.340376 2026] [security2:error] [pid 23647:tid 23647] [client 104.207.39.152:44765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddinganniversarynapkins.com"] [uri "/site/.git/config"] [unique_id "aZWyEXzCsLBW7MzjbdvZGQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2025-12-31 13:38:06 (5 months ago)	104.207.39.152 - - [31/Dec/2025:14:38:06 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.207.39.152 - - [31/Dec/2025:14:38:06 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2025-11-28 21:49:17 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.28 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.28 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-18 15:34:04 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.18 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 05:12:32 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-12 11:20:53 (7 months ago)	Attempted brute force login to web vpn 26 time(s); last attempt for 2025.11.12 is noted in report ti ... show more Attempted brute force login to web vpn 26 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇿 217.64.28.126

🇮🇩 202.72.196.75

🇨🇳 116.147.102.39

🇩🇪 87.106.210.86

🇨🇴 69.6.234.27

🇺🇸 45.86.211.131

🇺🇸 45.33.89.53

🇩🇿 197.140.142.207

🇺🇸 193.26.115.137

🇧🇷 187.106.54.208

🇨🇳 183.198.6.220

🇺🇸 172.232.8.247

🇧🇷 168.90.19.87

🇺🇸 162.216.149.235

🇸🇬 139.99.82.130

🇧🇷 179.110.226.59

🇻🇳 171.244.39.95

🇭🇰 152.32.252.65

🇷🇺 95.165.170.179

🇫🇮 74.125.46.16