JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.45.237

104.207.45.237 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.45.237

Whois 104.207.45.237

IP Abuse Reports for 104.207.45.237:

This IP address has been reported a total of 140 times from 26 distinct sources. 104.207.45.237 was first reported on June 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-05 21:13:29 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇬🇧 relianoid.com	2026-02-22 12:02:06 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 nowyouknow	2026-01-14 01:49:25 (4 months ago)	(From [email protected]) Supercharge commonwealthfamilyhealthcare.com seo with top quality seo ... show more (From [email protected]) Supercharge commonwealthfamilyhealthcare.com seo with top quality seo backlinks! BonusBacklinks.com - we provide daily backlinks and bring organic clicks to your website EVERY DAY: + Take 85% SALE + Trusted daily backlinks + Real website visits + Price only from $1 + Bonus coupon codes: https://BonusBacklinks.com/85off BonusBacklinks.com - daily seo backlinks and organic visits to boost your webpage every day show less	Phishing Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:51 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-27 13:03:48 (5 months ago)	2025-12-27T15:03:47.902208+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt ... show more 2025-12-27T15:03:47.902208+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt for [email protected] from 104.207.45.237 ... show less	Web App Attack
Anonymous	2025-12-22 18:34:25 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇵🇱 sefinek.net	2025-12-22 03:50:43 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 10dencehispahard SL	2025-11-19 07:04:08 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
🇺🇸 techboy117	2025-11-14 00:36:07 (6 months ago)	Blocking due to password spraying.	Brute-Force
Anonymous	2025-10-30 14:58:32 (7 months ago)	WordPress Brute Force	Brute-Force
🇦🇺 AWW-Admin	2025-10-29 13:21:40 (7 months ago)	(wordpress) Failed wordpress login from 104.207.45.237 (US/United States/-)	Brute-Force
Anonymous	2025-10-20 15:04:55 (7 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-10-18 12:00:54 (7 months ago)	(mod_security) mod_security (id:210831) triggered by 104.207.45.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 104.207.45.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 08:00:42.797990 2025] [security2:error] [pid 10058:tid 10058] [client 104.207.45.237:9041] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/usage_202510.html"] [unique_id "aPOBahfWkjc5Dg-rVtuHkAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2025-10-17 07:36:37 (7 months ago)	GlobalProtect login attempts with user fagoldberg.	VPN IP Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇾 185.216.134.126

🇺🇸 172.217.46.154

🇹🇼 104.28.159.155

🇺🇸 100.25.120.246

🇫🇷 62.210.142.176

🇨🇳 221.0.11.75

🇭🇰 199.45.154.130

🇩🇪 185.242.3.226

🇳🇱 185.156.73.233

🇨🇦 143.110.210.66

🇸🇬 101.47.27.73

🇱🇹 62.60.130.139

🇳🇱 45.142.193.10

🇬🇧 45.82.76.117

🇩🇪 195.230.103.244

🇨🇳 101.249.61.25

🇷🇴 92.118.39.236

🇺🇸 44.220.101.140

🇩🇪 35.198.110.254

🇨🇳 27.17.143.38