104.207.37.219

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
33% Elevated
133 reports
36 reporters · latest 12 hours ago
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
133 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 5 🇺🇸 United States of America 2 🇨🇿 Czechia 1
Most common categories Web App Attack 6 Bad Web Bot 3 SQL Injection 2 Exploited Host 1 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Blocked: Reason='High 404 error volume (> 10 in 60 min)'; Requests=37
Hacking
🇫🇷 pcouy
Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (iPhone; CPU iPhone OS 19_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Mobile/15E148 Safari/604.1 ...
Bad Web Bot
🇩🇪 BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸 drewf.ink
[14:19] Attempted HTTPS GlobalProtect login with credentials asantana:Pa*****d1
Web App Attack
🇫🇷 IRISIO
scans/SQL injection/spam posts : 1 queries
Web App Attack SQL Injection
🇫🇷 fineservice
PrestaShop Security Module: SQL injection probe detected
Web App Attack
🇺🇦 URAN Publishing Service
[24/Sep/2026:20:12:20 +0300] -- 104.207.37.219 Ban reason: Scanner [CMS_GENERIC] | Request: GET //phpMyAdmin// HTTP/1.1
Bad Web Bot Web App Attack
🇨🇿 plzenskypruvodce.cz
Brute-Force
🇫🇷 mikekarl
SQL INJECTION 1''
SQL Injection
🇫🇷 regishoussin
Automated web scanning detected by Wazuh (rule 100170): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-23 01:41 UTC.
Bad Web Bot Web App Attack
🇨🇭 backslash
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇩🇪 LRob
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot Web App Attack
🇫🇷 masterguru
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.37.219 (US/United States/-): 1 in the last 3600 secs (0-193)
Hacking
🇫🇷 masterguru
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.37.219 (US/United States/-): 1 in the last 3600 secs (0-196)
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 181.63.24.17
🇺🇸 193.202.16.46
🇬🇧 193.163.125.202
🇲🇽 177.249.27.205
🇨🇦 159.203.39.195
🇨🇳 106.75.156.189
🇱🇹 62.60.134.132
🇺🇸 24.43.144.225
🇨🇳 183.56.251.130
🇩🇪 64.89.163.140
🇹🇼 61.60.216.34
🇸🇬 51.79.230.77
🇳🇱 45.148.10.157
🇺🇸 45.43.57.64
🇬🇧 35.203.211.93
🇩🇪 69.5.169.26
🇬🇧 35.203.210.150
🇸🇬 206.189.83.144
🇺🇸 205.210.31.33
🇳🇱 195.178.110.217
feedback