JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.46.57

104.207.46.57 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.46.57

Whois 104.207.46.57

IP Abuse Reports for 104.207.46.57:

This IP address has been reported a total of 150 times from 19 distinct sources. 104.207.46.57 was first reported on June 5th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-23 01:25:13 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-05 01:42:34 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.46.57 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.46.57 2026-05-04 20:20:34 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2026-04-22 00:02:58 (1 month ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (X11; Linux x86 ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-21 01:02:13 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.46.57 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.46.57 2026-04-20 05:19:02 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-04-20 17:34:23 /config/DataSetConfig%23.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-07 02:14:26 (2 months ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.46.5 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.46.57 2026-03-06 03:08:13 /prod-api/v2/api-docs 2026-03-06 03:08:17 /v3/api-docs 2026-03-06 03:08:16 /api/swagger.json 2026-03-06 03:08:16 /swagger/docs/v1 2026-03-06 03:08:14 /v2/api-docs 2026-03-06 03:08:14 /swagger/v1/swagger.json show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 13:50:14 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 08:50:05.044674 2026] [security2:error] [pid 18515:tid 18515] [client 104.207.46.57:53963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.47"] [uri "/.git/config"] [unique_id "aaBPjf57FF7UnrfwWhO5TgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fbarela	2026-01-24 22:00:34 (4 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇱🇻 garmtech.com	2026-01-09 05:33:25 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-33.104.207.46.57.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-33.104.207.46.57.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-01-03 06:07:48 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.104.207.46.57.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.104.207.46.57.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-19 01:13:36 (5 months ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.46.57 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.46.57 2025-12-18 05:08:01 /video/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-18 00:56:21 (5 months ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.46.57 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.46.57 2025-12-17 09:42:57 /ispirit/login_code.php 2025-12-17 05:33:01 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2025-11-14 01:50:46 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 techboy117	2025-11-14 00:46:07 (6 months ago)	Blocking due to password spraying.	Brute-Force
Anonymous	2025-11-07 08:10:11 (6 months ago)	[redacted] 104.207.46.57 - - [07/Nov/2025:09:09:55 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "M ... show more [redacted] 104.207.46.57 - - [07/Nov/2025:09:09:55 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (iPad; CPU OS 6_1_3 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10B329 Safari/8536.25" [redacted] 104.207.46.57 - - [07/Nov/2025:09:09:58 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (Linux; Android 7.0; TRT-LX3 Build/HUAWEITRT-LX3; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/70.0.3538.80 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/196.0.0.41.95;]" [redacted] 104.207.46.57 - - [07/Nov/2025:09:09:59 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" [redacted] 104.207.46.57 - - [07/Nov/2025:09:10:01 +0100] "POST /xmlrpc.php HTTP/2.0" 200 447 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_2_1 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Mobile/14D27" [redacted] 104.207.46.57 - - ... show less	Hacking Web App Attack
🇫🇷 applemooz	2025-11-01 12:15:16 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.48.77.157

🇨🇳 101.126.26.93

🇪🇸 90.167.51.155

🇺🇸 20.163.15.19

🇺🇸 4.227.232.143

🇨🇴 190.84.116.89

🇨🇳 180.76.244.13

🇺🇸 138.99.38.189

🇵🇰 110.36.13.229

🇵🇰 103.12.197.122

🇭🇷 82.24.217.46

🇹🇼 61.222.211.114

🇮🇶 37.77.49.133

🇨🇳 36.103.243.179

🇩🇪 213.21.253.255

🇧🇷 205.210.31.192

🇨🇳 183.155.18.53

🇧🇷 177.30.64.65

🇺🇸 162.216.149.152

🇲🇦 160.176.19.30