JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.45.152

104.207.45.152 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.45.152

Whois 104.207.45.152

IP Abuse Reports for 104.207.45.152:

This IP address has been reported a total of 152 times from 26 distinct sources. 104.207.45.152 was first reported on June 13th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-17 02:32:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 21:32:28.359451 2026] [security2:error] [pid 16171:tid 16171] [client 104.207.45.152:15601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.donnysimonton.com"] [uri "/.env"] [unique_id "aWr0vBr-qaF76btCE4bPegAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 02:07:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 21:07:47.301957 2026] [security2:error] [pid 17271:tid 17271] [client 104.207.45.152:59715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.penjoki.us"] [uri "/.env"] [unique_id "aWru80F0mDsoEzRc0KLeCwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-12-18 12:15:09 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.45.152 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.45.152 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 Carsten	2025-11-25 11:45:33 (6 months ago)	bad web bot	Bad Web Bot
🇺🇸 etu brutus	2025-11-17 04:28:48 (6 months ago)	104.207.45.152 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
Anonymous	2025-11-14 21:19:24 (6 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 octageeks.com	2025-11-13 05:07:33 (6 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2025-10-17 18:39:56 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 11:13:29 (7 months ago)	GlobalProtect login attempts with user spech.	VPN IP Brute-Force
🇪🇸 10dencehispahard SL	2025-10-16 06:54:33 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-10-10 23:39:30 (7 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 21:16:01 (7 months ago)	Attempted brute force login to web vpn 216 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 216 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 16:20:27 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 23:04:59 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇭🇰 103.56.115.187

🇷🇺 91.146.28.230

🇧🇾 86.57.173.115

🇨🇳 222.243.221.233

🇷🇺 195.122.253.45

🇬🇧 188.240.59.36

🇰🇷 175.118.127.138

🇵🇫 148.66.82.159

🇩🇪 130.12.181.103

🇺🇸 64.62.156.192

🇸🇬 47.84.101.132

🇳🇱 45.148.10.183

🇭🇰 45.142.154.10

🇧🇪 34.78.86.247

🇺🇸 20.127.185.37

🇦🇷 181.116.220.140

🇺🇸 162.216.149.94

🇺🇸 135.237.126.76

🇷🇴 92.118.39.236