JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.38

104.207.39.38 was found in our database!

This IP was reported 158 times. Confidence of Abuse is 42%: ?

42%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.38

Whois 104.207.39.38

IP Abuse Reports for 104.207.39.38:

This IP address has been reported a total of 158 times from 22 distinct sources. 104.207.39.38 was first reported on June 11th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 billyborsht	2026-06-24 08:42:58 (3 days ago)	2026-06-24T20:42:57.336645+12:00 southern wordpress(nzangels.com)[1369940]: Authentication attempt f ... show more 2026-06-24T20:42:57.336645+12:00 southern wordpress(nzangels.com)[1369940]: Authentication attempt for unknown user root from 104.207.39.38 ... show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-23 03:07:10 (4 days ago)	(y4) Failed scan -byebye- from 104.207.39.38 (US/United States/-): (CF_ENABLE)	Hacking
🇲🇽 octageeks.com	2026-06-22 04:14:30 (5 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 F242	2026-06-21 07:46:03 (6 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 lostswordfish.com	2026-06-20 10:42:04 (1 week ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇲🇹 Malta	2026-06-16 12:15:38 (1 week ago)	104.207.39.38 - - [16/Jun/2026:14:15:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 104.207.39.38 - - [16/Jun/2026:14:15:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇮 inlink.ltd	2026-06-06 10:38:39 (3 weeks ago)	dot file probe	Web App Attack
🇺🇸 nowyouknow	2026-04-18 02:39:02 (2 months ago)	(From [email protected]) Hi Discover Chiropractic, I’ve built and trained an AI employe ... show more (From [email protected]) Hi Discover Chiropractic, I’ve built and trained an AI employee specifically for Discover Chiropractic. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇱🇻 garmtech.com	2026-03-08 21:12:26 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-12.104.207.39.38.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-12.104.207.39.38.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:16:46 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:16:42.192369 2025] [security2:error] [pid 16934:tid 16965] [client 104.207.39.38:60709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.maroontribe.com"] [uri "/.git/HEAD"] [unique_id "aSbTihKESCEx-WKRVnuCGgAAAYE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:15:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:14:59.986580 2025] [security2:error] [pid 9973:tid 9973] [client 104.207.39.38:59087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.comitedelafamille.org"] [uri "/.git/HEAD"] [unique_id "aSa3A5XxQq0voItOdur7OQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:12:35 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:12:28.247638 2025] [security2:error] [pid 26150:tid 26150] [client 104.207.39.38:60203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.macroprintbooks.com"] [uri "/.env"] [unique_id "aSaaTF36UXaXD7f9g97lrwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:35:26 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:35:20.467490 2025] [security2:error] [pid 2427378:tid 2427378] [client 104.207.39.38:25237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jellisonrepair.com"] [uri "/.svn/wc.db"] [unique_id "aSaRmD1HMycIfkQ-N3FxogAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:32:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:32:37.411894 2025] [security2:error] [pid 4809:tid 4809] [client 104.207.39.38:26743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kelvinlouie.com"] [uri "/.git/HEAD"] [unique_id "aSZmxXdkJyWhkEGlDNMOtgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:08:31 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:08:25.290738 2025] [security2:error] [pid 16192:tid 16192] [client 104.207.39.38:42845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kalvannaawards.com"] [uri "/.svn/wc.db"] [unique_id "aSZTCRlYwiye0DCOyHGmhAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 158 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 89.21.67.157

🇹🇼 211.22.131.70

🇧🇪 198.235.24.186

🇮🇩 182.13.96.107

🇸🇬 152.42.196.130

🇮🇳 103.82.210.181

🇨🇳 101.68.47.18

🇲🇾 49.124.159.195

🇰🇷 221.165.6.102

🇧🇩 202.37.52.49

🇺🇸 199.195.254.215

🇺🇸 172.86.123.118

🇺🇸 143.244.160.144

🇺🇸 100.29.192.12

🇺🇸 44.27.113.173

🇧🇪 198.235.24.255

🇷🇴 193.32.162.84

🇮🇳 183.82.56.12

🇨🇳 182.61.14.89

🇧🇷 168.121.139.129