JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.46.81

104.207.46.81 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.46.81

Whois 104.207.46.81

IP Abuse Reports for 104.207.46.81:

This IP address has been reported a total of 157 times from 24 distinct sources. 104.207.46.81 was first reported on June 5th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-02-10 03:12:55 (4 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2026-01-06 19:47:11 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.46.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 104.207.46.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 14:47:01.810986 2026] [security2:error] [pid 12216:tid 12216] [client 104.207.46.81:10219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "aV1mtUeJ2NhLjtuHefXp3wAAAB0"], referer: http://www.qualityelevatorcabs.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-30 19:25:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 14:25:16.552086 2025] [security2:error] [pid 7879:tid 7879] [client 104.207.46.81:25057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.osmanhc.com"] [uri "/.git/HEAD"] [unique_id "aVQnHHD31ZzGn5MfF8Lb-AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2025-12-30 11:06:57 (5 months ago)	Brute force	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:13 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 04:27:17 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.81 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:27:12.876497 2025] [security2:error] [pid 19212:tid 19212] [client 104.207.46.81:34911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibeautyexchange.com"] [uri "/.git/HEAD"] [unique_id "aVIDIIsLo6CwvtWFqWsnYwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-29 19:35:09 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.29 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 10dencehispahard SL	2025-11-19 07:05:07 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-18 00:40:22 (7 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.18 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
🇵🇱 sefinek.net	2025-11-15 17:42:47 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-11-14 02:54:24 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-08 05:55:06 (7 months ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.11.08 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.11.08 is noted in report timestamp show less	Hacking Brute-Force
🇦🇺 weblite	2025-11-05 16:02:41 (7 months ago)	WP_LOGIN_FAIL WP_XMLRPC_ABUSE	Brute-Force Web App Attack
🇩🇪 london2038.com	2025-10-26 05:26:03 (7 months ago)	Detected by WP fail2ban 2025-10-26T06:26:02.130954+01:00 wordpress: Authentication attempt from 104. ... show more Detected by WP fail2ban 2025-10-26T06:26:02.130954+01:00 wordpress: Authentication attempt from 104.207.46.81 show less	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-14 18:36:30 (8 months ago)	GlobalProtect login attempts with user caturbervi.	VPN IP Brute-Force

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.147.19.238

🇺🇸 162.216.150.157

🇳🇴 87.120.104.75

🇺🇸 207.90.244.18

🇧🇷 201.17.133.138

🇭🇰 199.48.247.211

🇺🇸 165.154.172.73

🇮🇳 135.235.138.43

🇨🇳 123.178.139.90

🇨🇳 111.229.119.22

🇳🇵 103.130.207.227

🇮🇳 103.30.83.38

🇺🇸 71.6.134.230

🇺🇸 47.251.107.146

🇳🇱 45.148.10.121

🇳🇱 45.74.59.2

🇸🇪 31.59.160.12

🇨🇳 219.155.71.128

🇧🇷 205.210.31.251

🇧🇷 201.76.120.30