JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.47.101

104.207.47.101 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.47.101

Whois 104.207.47.101

IP Abuse Reports for 104.207.47.101:

This IP address has been reported a total of 164 times from 31 distinct sources. 104.207.47.101 was first reported on June 11th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-12 07:45:21 (2 days ago)	Brute force	Brute-Force
🇩🇪 stinpriza	2026-07-12 04:55:28 (3 days ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-06-24 03:26:36 (3 weeks ago)	Brute force	Brute-Force
Anonymous	2026-04-17 07:25:29 (2 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-03-30 05:30:42 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2026-03-18 18:02:07 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-03-06 20:50:46 (4 months ago)	Forum/form spam	Web Spam
🇺🇸 mnsf	2026-02-16 00:05:43 (4 months ago)	Scanning/Probing (30)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:46:02 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:45:57.335261 2026] [security2:error] [pid 18644:tid 18644] [client 104.207.47.101:46911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toberoocrafts.com"] [uri "/backup/.git/config"] [unique_id "aZHABbanhLkT8WEjx2HwhwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Anytech	2026-02-15 12:38:44 (4 months ago)	CrowdSec detected: crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2026-02-15 06:13:07 (5 months ago)	12 attacks on env grabbing URLs, password grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /.aw ... show more 12 attacks on env grabbing URLs, password grabbing URLs, VC URLs: GET /config/.env HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /api/.git/config HTTP/1.1 show less	Hacking
🇺🇸 TPI-Abuse	2026-02-15 05:12:21 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:12:18.109442 2026] [security2:error] [pid 20114:tid 20114] [client 104.207.47.101:53209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshinenv.com"] [uri "/.env.local"] [unique_id "aZFVsibydmvw7DmNl-u5dQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:29:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:29:08.902338 2026] [security2:error] [pid 794622:tid 794622] [client 104.207.47.101:57159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staugustineflyfishing.net"] [uri "/.git/config"] [unique_id "aZE9hL4TqGJCYmbzYxS0HwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-02-15 03:06:21 (5 months ago)	(modsecurity) srv103 ModSecurity 104.207.47.101 (US/United States/-): 5 in the last 3600 secs; Ports ... show more (modsecurity) srv103 ModSecurity 104.207.47.101 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇩 Burayot	2026-02-15 02:46:20 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.47.101 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.47.101 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.100.244

🇬🇧 193.176.29.27

🇬🇧 188.240.59.45

🇵🇱 176.53.159.197

🇺🇸 165.154.173.211

🇺🇸 162.216.150.168

🇺🇸 162.216.150.40

🇩🇪 2a00:11c0:5f:13e::70

🇺🇸 2607:f8b0:4004:c0b::126

🇸🇪 193.189.100.196

🇫🇷 172.71.127.63

🇵🇱 170.168.175.144

🇺🇸 162.216.150.199

🇺🇸 162.216.150.191

🇳🇱 160.119.76.32

🇮🇳 122.180.21.11

🇻🇳 116.110.6.251

🇦🇺 115.129.168.80

🇺🇸 64.62.156.75

🇳🇱 45.148.10.152