JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.43.150

104.207.43.150 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 31%: ?

31%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.43.150

Whois 104.207.43.150

IP Abuse Reports for 104.207.43.150:

This IP address has been reported a total of 154 times from 26 distinct sources. 104.207.43.150 was first reported on June 5th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-01 01:22:33 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Thaliruth	2026-07-18 15:33:53 (2 weeks ago)	reiter-von-rohan.de:443 104.207.43.150 - - [18/Jul/2026:17:33:49 +0200] "GET /sitemap.xml.gz HTTP/1. ... show more reiter-von-rohan.de:443 104.207.43.150 - - [18/Jul/2026:17:33:49 +0200] "GET /sitemap.xml.gz HTTP/1.1" 301 5363 "-" "Mozilla/5.0" 104.207.43.150 - - [18/Jul/2026:17:33:53 +0200] "GET /sitemap.xml.gz HTTP/1.1" 404 7958 "-" "Mozilla/5.0" ... show less	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-07-09 04:17:54 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-07-07 12:06:07 (3 weeks ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=www.example.com; logs=/var/log/httpd/access_log; sample ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=www.example.com; logs=/var/log/httpd/access_log; samples=site_wide=true \| distinct_ips=13 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-07-06 15:16:02 (3 weeks ago)	Wordfence waf block on tranquilfrogs	Web App Attack
🇫🇷 ELYAZ	2026-07-04 19:30:10 (4 weeks ago)	(y4) Failed scan -byebye- from 104.207.43.150 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-07-03 12:45:55 (4 weeks ago)	(y4) Failed scan -byebye- from 104.207.43.150 (US/United States/-): (CF_ENABLE)	Hacking
🇨🇭 backslash	2025-12-27 19:10:05 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 23:38:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 18:38:16.615995 2025] [security2:error] [pid 29011:tid 29011] [client 104.207.43.150:20439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asmeinfo.com"] [uri "/.svn/wc.db"] [unique_id "aToEaKD96d-7Ie02gNpa7wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2025-12-09 15:21:06 (7 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 19:14:31 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 14:14:25.803157 2025] [security2:error] [pid 16882:tid 16882] [client 104.207.43.150:26655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psdinnersready.com"] [uri "/.git/HEAD"] [unique_id "aTcjkcZYM3uamkWHpgLQAgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 21:34:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 16:34:08.213499 2025] [security2:error] [pid 15770:tid 15770] [client 104.207.43.150:15851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woodsoninsuranceagency.com"] [uri "/.git/HEAD"] [unique_id "aTXy0CBihOtK5FddnnWugAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 17:28:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 12:28:01.690430 2025] [security2:error] [pid 12113:tid 12113] [client 104.207.43.150:15893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hometoamerica.com"] [uri "/.svn/wc.db"] [unique_id "aTMWIcrnLnBCiOGTz25wmAAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:29:26 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:29:20.925952 2025] [security2:error] [pid 16908:tid 16908] [client 104.207.43.150:60869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwijlen.com"] [uri "/.env"] [unique_id "aTK0AN4ogsrlSqdpH4k2gwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 02:45:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:45:06.622829 2025] [security2:error] [pid 17876:tid 17876] [client 104.207.43.150:21155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mbehel.com"] [uri "/.svn/wc.db"] [unique_id "aTJHMtwQy2wQGkdlmKGqbQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.243.133.81

🇧🇪 207.175.65.66

🇷🇴 193.46.255.86

🇳🇱 185.242.226.9

🇳🇱 141.101.76.180

🇺🇦 109.254.208.38

🇳🇱 89.21.67.136

🇬🇧 35.203.211.4

🇳🇱 213.176.26.194

🇳🇱 213.176.26.51

🇹🇷 185.201.212.242

🇩🇴 181.232.190.250

🇧🇷 177.55.225.113

🇺🇸 152.32.208.7

🇯🇵 139.162.88.198

🇮🇳 122.176.21.104

🇮🇳 98.70.50.166

🇫🇷 85.217.140.47

🇨🇳 43.248.139.239

🇺🇸 35.185.1.243