JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.37.162

104.207.37.162 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.37.162

Whois 104.207.37.162

IP Abuse Reports for 104.207.37.162:

This IP address has been reported a total of 163 times from 26 distinct sources. 104.207.37.162 was first reported on May 21st 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LSPCCU	2026-06-14 23:29:49 (1 day ago)	TSEC Honeypot Network report. Threat score: 68/100. Categories: Hacking, Brute-Force, Web App Attack ... show more TSEC Honeypot Network report. Threat score: 68/100. Categories: Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 104. show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 TAY	2026-06-14 07:34:48 (2 days ago)	104.207.37.162 - - [14/Jun/2026:15:34:45 +0800] "GET /wp-admin/admin.php?page=supsystic-backup&tab=b ... show more 104.207.37.162 - - [14/Jun/2026:15:34:45 +0800] "GET /wp-admin/admin.php?page=supsystic-backup&tab=bupLog&download=..%2Fwp-config.php HTTP/1.1" 301 585 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 104.207.37.162 - - [14/Jun/2026:15:34:47 +0800] "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwp-config.php HTTP/1.1" 301 729 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 104.207.37.162 - - [14/Jun/2026:15:34:48 +0800] "GET /wp-content/themes/mTheme-Unus/css/css.php?files=..%2F..%2F..%2F..%2Fwp-config.php HTTP/1.1" 301 581 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" ... show less	Brute-Force
🇬🇧 PeravixGroup	2026-06-09 15:51:48 (6 days ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 oncord	2026-06-09 05:20:26 (1 week ago)	Form spam	Web Spam
🇬🇧 PeravixGroup	2026-05-22 11:33:23 (3 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-14 23:21:37 (1 month ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.37.162 2 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.37.162 2026-05-14 02:36:48 /nacos/v1/auth/users?pageNo=1&pageSize=10 show less	Web App Attack
🇬🇧 Steve	2026-05-01 05:34:18 (1 month ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-25 23:03:13 (1 month ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.37.162 2026-04-25 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.37.162 2026-04-25 05:10:49 /prod-api/v2/api-docs 2026-04-25 05:10:52 /v3/api-docs 2026-04-25 05:10:50 /swagger/v1/swagger.json 2026-04-25 05:10:50 /v2/api-docs 2026-04-25 05:10:51 /swagger/docs/v1 2026-04-25 05:10:51 /api/swagger.json show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-17 23:19:16 (1 month ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.37.162 2 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.37.162 2026-04-17 01:26:14 /druid/index.html 2026-04-17 19:04:01 /druid/index.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-01 23:18:30 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.37.16 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.37.162 2026-04-01 18:09:14 /v2/api-docs 2026-04-01 18:09:16 /v3/api-docs 2026-04-01 18:09:14 /swagger/v1/swagger.json 2026-04-01 18:09:15 /api/swagger.json 2026-04-01 18:09:12 /prod-api/v2/api-docs 2026-04-01 18:09:15 /swagger/docs/v1 show less	Web App Attack
🇦🇺 MAGIC	2026-03-10 02:30:41 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2026-03-01 23:32:13 (3 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.37.162 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.37.162 2026-03-01 07:18:30 /druid/index.html show less	Web App Attack
Anonymous	2026-02-08 01:03:52 (4 months ago)	Forum/form spam	Web Spam
🇨🇳 ThreatBook.io	2026-02-01 23:53:06 (4 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.37.162 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.37.162 2026-02-01 10:33:56 /v2/api-docs 2026-02-01 10:34:00 /v3/api-docs 2026-02-01 10:33:55 /prod-api/v2/api-docs 2026-02-01 10:33:57 /swagger/v1/swagger.json 2026-02-01 10:33:58 /api/swagger.json 2026-02-01 10:33:58 /swagger/docs/v1 show less	Web App Attack
🇩🇪 F242	2026-01-30 05:08:13 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.111.30.78

🇻🇳 171.244.39.95

🇷🇴 2.57.121.112

🇵🇰 206.42.117.34

🇵🇱 194.180.49.104

🇬🇧 185.247.137.11

🇫🇮 147.185.133.102

🇮🇳 49.36.127.19

🇳🇱 45.156.87.117

🇷🇺 5.167.65.179

🇺🇸 146.235.238.160

🇺🇸 108.62.59.229

🇳🇱 91.92.40.239

🇨🇳 42.100.59.162

🇨🇳 39.105.85.43

🇰🇪 197.248.144.251

🇺🇸 173.239.211.43

🇨🇳 114.103.80.55

🇮🇩 103.191.92.172

🇯🇵 45.250.255.154