JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.46.15

104.207.46.15 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.46.15

Whois 104.207.46.15

IP Abuse Reports for 104.207.46.15:

This IP address has been reported a total of 94 times from 23 distinct sources. 104.207.46.15 was first reported on July 5th 2024, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-24 08:37:11 (11 hours ago)	(wordpress) Failed wordpress login from 104.207.46.15 (US/United States/-): (CF_ENABLE)	Brute-Force
🇩🇪 ketovoila.pl	2026-07-23 21:08:06 (23 hours ago)	ketovoila.pl WordPress login/xmlrpc probing: hits=1; unique_paths=1; sample_paths=/wp-login.php; UA= ... show more ketovoila.pl WordPress login/xmlrpc probing: hits=1; unique_paths=1; sample_paths=/wp-login.php; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"; window=2026-07-23T21:08:06Z..2026-07-23T21:08:06Z show less	Web App Attack
🇳🇿 Antinson	2026-05-27 18:01:54 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-05-24 19:39:44 (2 months ago)	"GET http://<domain>.com:80/wp-includes/wlwmanifest.xml HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-01-20 21:53:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 16:53:44.194728 2026] [security2:error] [pid 28270:tid 28270] [client 104.207.46.15:14545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.git/HEAD"] [unique_id "aW_5aKOGg4lMNh9rcxnbnQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2026-01-04 02:28:00 (6 months ago)	Form spam	Web Spam
🇺🇸 inspectorgdgt	2025-12-24 22:00:00 (6 months ago)	VPN brute-force login attempts observed (bulk report).	Brute-Force
🇺🇸 nowyouknow	2025-12-20 09:06:50 (7 months ago)	(From [email protected]) Hi, Get a full-time Digital Marketing Assistant for only $250/mo ... show more (From [email protected]) Hi, Get a full-time Digital Marketing Assistant for only $250/month. Our trained staff handle SEO, Google & Meta Ads, Email Marketing, Social Media, Order Management, and more—working a minimum of 8 hours per day. Your first month is completely free. Fill out the form below to get started. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSc0j7_PYJOBpCDJqJEYWDUYRLFuf0fN596h51an A8k8Me0efA/viewform?usp=header GLE Link to Google Forms: https://forms.gle/4uj4nBHTiJVQooFA8 Short link: https://shorturl.at/o4IYf show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-26 08:58:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:58:44.232409 2025] [security2:error] [pid 8711:tid 8711] [client 104.207.46.15:58949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thewillsmith.com"] [uri "/.svn/wc.db"] [unique_id "aSbBRDyXcs9lkxth9_FYjwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 22:59:08 (7 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-24. show less	Hacking Web App Attack SSH
🇱🇻 garmtech.com	2025-11-24 19:02:51 (8 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:18:50 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:18:43.271576 2025] [security2:error] [pid 27604:tid 27604] [client 104.207.46.15:56155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.octaviomontes.com"] [uri "/.env"] [unique_id "aSQi87HGSJGw0URzMded0QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:25:09 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:25:04.401972 2025] [security2:error] [pid 23311:tid 23311] [client 104.207.46.15:43445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkdull.org"] [uri "/.env"] [unique_id "aSQWYPfslll_rUrlDhZOqgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:51:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:50:58.059326 2025] [security2:error] [pid 554:tid 554] [client 104.207.46.15:14793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.livingminimal.com"] [uri "/.svn/wc.db"] [unique_id "aSQAUgbiHNo5XuvN_gZEPgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:08:29 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:08:16.508885 2025] [security2:error] [pid 3965260:tid 3965367] [client 104.207.46.15:24593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cynosurelandscapers.com"] [uri "/.env"] [unique_id "aSPaMKyiyKH59MCrZuH59gAAAg8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.44.71.43

🇸🇬 165.232.167.128

🇰🇷 121.169.236.186

🇻🇳 103.122.221.179

🇺🇸 45.156.129.191

🇿🇦 160.119.248.167

🇰🇷 125.133.102.132

🇻🇳 103.75.183.43

🇪🇬 41.239.119.112

🇨🇭 20.203.142.71

🇨🇳 14.155.118.104

🇬🇧 5.252.83.80

🇺🇦 194.44.145.76

🇺🇸 174.179.100.65

🇺🇸 163.123.182.153

🇺🇸 162.216.150.212

🇪🇸 68.221.130.241

🇩🇪 64.226.126.224

🇫🇮 45.148.101.101

🇬🇧 2.57.17.220