JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.31

104.207.39.31 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.31

Whois 104.207.39.31

IP Abuse Reports for 104.207.39.31:

This IP address has been reported a total of 150 times from 27 distinct sources. 104.207.39.31 was first reported on June 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-14 14:16:06 (1 month ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇳🇱 homeshowdomain.nl	2026-05-13 21:59:31 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-13	Web App Attack SSH Hacking
🇦🇺 2000cn.com.au	2026-05-13 18:53:42 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 iNetWorker	2026-05-13 18:37:41 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
🇨🇭 4server	2026-05-10 12:52:47 (1 month ago)	[SunMay1014:52:40.6020232026][security2:error][pid3397407:tid3397434][client104.207.39.31:0]ModSecur ... show more [SunMay1014:52:40.6020232026][security2:error][pid3397407:tid3397434][client104.207.39.31:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mondo-it.ch\"][uri\"/.git/HEAD\"][unique_id\"agB_mGZKiRU63BDEbEwqSQAAAFI\"] show less	Hacking Web App Attack
🇦🇺 oncord	2026-05-06 18:42:53 (1 month ago)	Form spam	Web Spam
🇫🇷 masterguru	2026-04-01 19:03:26 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.31 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.31 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-03-30 06:21:59 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.31 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.31 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇫🇷 masterguru	2026-03-25 18:33:02 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.31 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.31 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇬🇧 relianoid.com	2026-02-21 14:21:50 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇮🇹 VHosting	2026-02-18 22:20:37 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-13 08:43:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:43:44.840589 2026] [security2:error] [pid 5982:tid 5982] [client 104.207.39.31:33907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mesaparaseis.com"] [uri "/backup/.git/config"] [unique_id "aY7kQCwIiZSA6qegXSU6egAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 07:35:32 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:35:24.353627 2026] [security2:error] [pid 31810:tid 31810] [client 104.207.39.31:19191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mehlerproperties.com"] [uri "/wp/.git/config"] [unique_id "aY7UPJkdt7qKxiNiPHAhywAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:57:00 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:56:52.811612 2026] [security2:error] [pid 17184:tid 17184] [client 104.207.39.31:29695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medicalexchangeasinc.com"] [uri "/.env"] [unique_id "aY7LNDR3Uy-HTqKd579CygAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.169.201.223

🇩🇪 167.94.145.22

🇮🇹 91.80.174.230

🇳🇱 45.148.10.147

🇺🇸 18.224.180.243

🇨🇳 180.76.61.232

🇨🇳 59.62.81.167

🇲🇾 49.124.149.217

🇧🇷 34.95.197.36

🇻🇳 14.179.41.171

🇦🇺 203.185.198.246

🇭🇰 150.5.148.103

🇳🇱 143.20.79.61

🇻🇳 103.176.20.115

🇺🇸 91.193.232.130

🇺🇸 72.10.32.138

🇳🇱 192.253.248.180

🇺🇸 172.172.237.178

🇻🇳 171.249.179.78

🇹🇷 94.154.43.158