JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.46.197

104.207.46.197 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 52%: ?

52%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.46.197

Whois 104.207.46.197

IP Abuse Reports for 104.207.46.197:

This IP address has been reported a total of 147 times from 28 distinct sources. 104.207.46.197 was first reported on June 5th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-06-16 01:18:57 (13 hours ago)	Attacking WordPress 104.207.46.197 - - [16/Jun/2026:03:18:54 +0200] "POST /wp-login.php HTTP/1.1" 50 ... show more Attacking WordPress 104.207.46.197 - - [16/Jun/2026:03:18:54 +0200] "POST /wp-login.php HTTP/1.1" 503 19309 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Brute-Force Web App Attack
🇭🇺 bcsaba	2026-06-12 23:40:19 (3 days ago)	CMS (WordPress or Joomla) login attempt. 104.207.46.197 - - [13/Jun/2026:01:40:16 +0200] "POST /wp-l ... show more CMS (WordPress or Joomla) login attempt. 104.207.46.197 - - [13/Jun/2026:01:40:16 +0200] "POST /wp-login.php HTTP/1.1" 200 3521 "https://REDACTED/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0" show less	Hacking Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-12 19:14:36 (3 days ago)	(y4) Failed scan -byebye- from 104.207.46.197 (US/United States/-): (CF_ENABLE)	Hacking
🇬🇷 setupgr	2026-06-12 15:37:59 (3 days ago)	(mod_security) mod_security (id:900001) triggered by 104.207.46.197: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 104.207.46.197: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 18:37:59.035381 2026] [security2:error] [pid 351317:tid 351484] [client 104.207.46.197:38895] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.pankoskal.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.pankoskal.gr"] [uri "/wp-login.php"] [unique_id "aiwn19MUiHpGKlaNgvQxSAAAAY8"], referer: https://mail.pankoskal.gr/wp-login.php show less	Port Scan
🇦🇺 MAGIC	2026-06-12 02:34:11 (4 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇷 setupgr	2026-06-12 01:02:27 (4 days ago)	(mod_security) mod_security (id:900001) triggered by 104.207.46.197: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 104.207.46.197: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 04:02:26.146927 2026] [security2:error] [pid 52863:tid 53037] [client 104.207.46.197:16655] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: tavernadimitris.com"] [severity "CRITICAL"] [tag "security"] [hostname "tavernadimitris.com"] [uri "/wp-login.php"] [unique_id "aitaohJWFl-XeyyYvI7AWQAAANA"], referer: https://tavernadimitris.com/wp-login.php show less	Port Scan
🇲🇽 octageeks.com	2026-06-11 04:21:00 (5 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-06-11 01:20:08 (5 days ago)	Web attack blocked by Wordfence on helenehoenjet.nl (1 hit). Reported by CRMON.	Web App Attack
🇩🇪 georgengelmann	2026-06-09 18:47:05 (6 days ago)	Failed login attempt for [email protected]	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-09 18:08:31 (6 days ago)	(y4) Failed scan -byebye- from 104.207.46.197 (US/United States/-): (CF_ENABLE)	Hacking
🇪🇸 librebit	2026-05-17 05:37:45 (4 weeks ago)	Brute force	Brute-Force
🇺🇸 nowyouknow	2026-05-02 19:55:43 (1 month ago)	(From [email protected]) Hey, I’m offering something real value for free No catch. Hit ... show more (From [email protected]) Hey, I’m offering something real value for free No catch. Hit this link to enter now before it fills: https://suniljaindvg.systeme.io/6850adaf Takes like 10 sec. Could end up yours. Join now. If you don’t want to receive messages from me, please submit the form on my website show less	Phishing Web Spam
🇱🇻 garmtech.com	2026-04-29 22:39:25 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-39.104.207.46.197.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-39.104.207.46.197.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-04-12 05:44:10 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 14.29.214.161

🇸🇬 212.11.39.176

🇮🇳 110.227.215.90

🇺🇸 100.29.192.54

🇫🇷 85.217.140.50

🇫🇷 62.84.187.219

🇺🇸 35.212.144.87

🇻🇳 14.225.7.70

🇺🇸 172.58.121.194

🇸🇪 171.25.158.80

🇨🇳 114.237.175.217

🇮🇪 91.218.37.2

🇳🇱 91.92.40.11

🇻🇳 14.191.214.128

🇺🇸 207.254.40.89

🇨🇴 191.97.12.90

🇲🇽 187.190.35.163

🇮🇩 182.11.129.153

🇳🇱 178.16.54.237

🇸🇬 138.2.107.196