JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.43.195

104.207.43.195 was found in our database!

This IP was reported 133 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.43.195

Whois 104.207.43.195

IP Abuse Reports for 104.207.43.195:

This IP address has been reported a total of 133 times from 21 distinct sources. 104.207.43.195 was first reported on June 6th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-05-13 15:35:31 (4 weeks ago)	(From [email protected]) Hi Vibrant Health Chiropractic, I wanted to bump this in c ... show more (From [email protected]) Hi Vibrant Health Chiropractic, I wanted to bump this in case you missed it — I built an AI agent just for Vibrant Health Chiropractic, trained on your website, Google info, and everything I could find. It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part. Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee. Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇦🇺 MAGIC	2026-02-07 01:26:06 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-27 22:51:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 17:51:44.132097 2025] [security2:error] [pid 28163:tid 28163] [client 104.207.43.195:55923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wlsn.com"] [uri "/.svn/wc.db"] [unique_id "aVBjAIAamibtyRRIu22qIQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 19:46:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:46:45.805083 2025] [security2:error] [pid 10851:tid 10851] [client 104.207.43.195:25079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiamur.com"] [uri "/.git/HEAD"] [unique_id "aVA3pfoUSfOui2L-Yk3LEAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-27 17:40:10 (5 months ago)	"GET /.git/HEAD HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 17:04:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.195 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 12:04:45.406536 2025] [security2:error] [pid 1716:tid 1716] [client 104.207.43.195:22559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerrylogoluso.com"] [uri "/.svn/wc.db"] [unique_id "aVARrXC6Exk2D8rK3UtAUgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-12-26 03:30:30 (5 months ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 ut-addicted.com	2025-12-26 00:56:29 (5 months ago)	\[Fri Dec 26 01:56:27.246987 2025\] \[:error\] \[pid 15274:tid 140546077062912\] \[client 104.207.43 ... show more \[Fri Dec 26 01:56:27.246987 2025\] \[:error\] \[pid 15274:tid 140546077062912\] \[client 104.207.43.195:12453\] \[client 104.207.43.195\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 10\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/.svn/wc.db"\] \[unique_id "aU3dOwtLP9yO7kXbXc95AgAAAMg"\] show less	Brute-Force Web App Attack
🇫🇷 geeek	2025-12-26 00:16:22 (5 months ago)	1 attack(s) blocked. Source: firewallCustom. Target: www.geeek.org/.env	Hacking Web App Attack
Anonymous	2025-12-01 06:58:37 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-29 04:30:52 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 fbarela	2025-11-07 23:00:36 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇫🇮 bittiguru.fi	2025-10-27 05:06:42 (7 months ago)	Oct 27 07:06:40 tuotantolaitos sshd[215653]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Oct 27 07:06:40 tuotantolaitos sshd[215653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.43.195 Oct 27 07:06:42 tuotantolaitos sshd[215653]: Failed password for invalid user [email protected] from 104.207.43.195 port 50499 ssh2 ... show less	Brute-Force SSH
🇩🇪 cloudmax	2025-10-18 19:03:54 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇮🇹 Rosh	2025-10-17 19:41:20 (7 months ago)	[10/17/25 21:41:19] SSH: authentication failure	Brute-Force SSH

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.165

🇰🇷 121.131.220.152

🇮🇩 103.139.193.223

🇺🇸 66.132.172.125

🇲🇽 187.174.238.116

🇺🇸 172.253.2.26

🇮🇳 168.144.157.100

🇺🇸 138.113.22.151

🇧🇩 103.183.62.0

🇷🇴 80.94.92.184

🇧🇬 78.130.145.209

🇺🇸 66.132.195.41

🇺🇸 64.62.197.191

🇨🇳 58.44.9.206

🇮🇳 49.204.18.20

🇩🇪 46.224.17.91

🇳🇱 45.198.224.5

🇬🇧 35.203.210.102

🇷🇺 31.173.31.66

🇮🇳 1.39.78.81