JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.46.225

104.207.46.225 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.46.225

Whois 104.207.46.225

IP Abuse Reports for 104.207.46.225:

This IP address has been reported a total of 140 times from 21 distinct sources. 104.207.46.225 was first reported on June 6th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-20 00:24:35 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 OceanTreasure	2026-03-02 06:35:24 (3 months ago)	tcp/80; Environment file access attempt: "GET /.env" @ 2026-03-02T06:27:44Z [azure]	Web App Attack
🇺🇸 mind5t0rm	2026-01-26 15:44:30 (4 months ago)	(WPLOGIN) WP Login Attack 104.207.46.225 (US/United States/-): 3 in the last 3600 secs; Ports: ; Di ... show more (WPLOGIN) WP Login Attack 104.207.46.225 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 104.207.46.225 - - [26/Jan/2026:22:44:14 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/2.0" 200 2453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 104.207.46.225 - - [26/Jan/2026:22:44:15 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/2.0" 302 0 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" 104.207.46.225 - - [26/Jan/2026:22:44:26 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2Fplugins.php&reauth=1 HTTP/2.0" 200 2449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	Port Scan
🇪🇸 10dencehispahard SL	2026-01-26 07:34:51 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-19 23:56:35 (5 months ago)	wordpress-trap	Web App Attack
🇱🇻 garmtech.com	2026-01-17 11:24:49 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇨🇭 ALPHANET	2025-12-02 02:10:02 (6 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
Anonymous	2025-11-13 23:03:53 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-14 06:39:58 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-10 15:51:53 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.46.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.46.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 11:51:49.650127 2025] [security2:error] [pid 31419:tid 31419] [client 104.207.46.225:14957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|myuscpa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "myuscpa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOkrlTVw2BfipssZWjtoZQAAABQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2025-10-09 12:59:53 (8 months ago)	GlobalProtect login attempts with user lavellucci.	VPN IP Brute-Force
Anonymous	2025-10-09 11:58:05 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.09 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 21:13:27 (8 months ago)	2025-10-02T23:13:25.409334 localhost.localdomain sshd[272777]: Failed password for root from 104.207 ... show more 2025-10-02T23:13:25.409334 localhost.localdomain sshd[272777]: Failed password for root from 104.207.46.225 port 55687 ssh2 2025-10-02T23:13:27.175574 localhost.localdomain sshd[272777]: Connection closed by authenticating user root 104.207.46.225 port 55687 [preauth] ... show less	Brute-Force SSH
🇧🇷 hostseries	2025-09-29 19:27:53 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-09-28 04:39:02 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.28 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.28 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.84

🇨🇳 119.96.193.72

🇺🇸 205.210.31.108

🇹🇼 198.235.24.126

🇲🇿 196.28.226.66

🇭🇰 182.237.0.205

🇧🇷 177.82.135.92

🇺🇸 174.138.39.207

🇺🇸 147.185.132.88

🇰🇷 118.45.101.159

🇫🇷 92.205.184.118

🇧🇬 79.124.62.126

🇷🇺 62.122.195.14

🇺🇸 47.253.137.49

🇭🇰 47.76.190.178

🇺🇦 37.221.130.117

🇪🇸 196.196.150.4

🇰🇷 183.96.62.29

🇳🇱 176.65.139.181

🇳🇱 176.65.139.94