JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.47.148

104.207.47.148 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.47.148

Whois 104.207.47.148

IP Abuse Reports for 104.207.47.148:

This IP address has been reported a total of 130 times from 15 distinct sources. 104.207.47.148 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-01-28 19:45:40 (4 months ago)	2026-01-28 20:45:39 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-23 07:33:16 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-31 01:51:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 20:51:10.393472 2025] [security2:error] [pid 1065125:tid 1065138] [client 104.207.47.148:42233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.selecttech.org"] [uri "/.git/HEAD"] [unique_id "aVSBjvtuR2rJeGLz2GwLvgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Security_Whaller	2025-12-30 06:27:58 (5 months ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 09:14:02 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:13:57.086806 2025] [security2:error] [pid 30110:tid 30110] [client 104.207.47.148:53181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itony.com"] [uri "/.svn/wc.db"] [unique_id "aVJGVbaHM3U3Bj0h0iyV5gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:42:11 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:42:03.830002 2025] [security2:error] [pid 1301:tid 1301] [client 104.207.47.148:44595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mldlnn.com"] [uri "/.env"] [unique_id "aVI-2y7Xr2fLNCUTwsaIPwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:11:36 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:11:27.718498 2025] [security2:error] [pid 28197:tid 28197] [client 104.207.47.148:21983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "80corvette.com"] [uri "/.git/HEAD"] [unique_id "aVI3r_6GNq-Tw49sqbgMPgAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:20:25 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:20:19.100806 2025] [security2:error] [pid 24678:tid 24678] [client 104.207.47.148:47765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmjaero.com"] [uri "/.git/HEAD"] [unique_id "aVIdo2Cy56IaX0w7du3GUQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-15 11:38:20 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 06:47:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:47:50.816263 2025] [security2:error] [pid 13942:tid 14027] [client 104.207.47.148:21041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "annybelle.org"] [uri "/.env"] [unique_id "aSP_lg9TCbHXOd9uq_d6MgAAAc8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:29:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:50.528260 2025] [security2:error] [pid 25289:tid 25289] [client 104.207.47.148:57135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.maidsinmalta.com"] [uri "/.svn/wc.db"] [unique_id "aSP7XkFM2Cwi4SlN4-dg8QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:57:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:56:42.601778 2025] [security2:error] [pid 28695:tid 28695] [client 104.207.47.148:34957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ribas.name"] [uri "/.git/HEAD"] [unique_id "aSPlilGQdGWhfEiizxq5ngAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-26 13:33:58 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇧🇷 hostseries	2025-10-24 23:56:17 (7 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇨🇦 wil.com	2025-10-18 05:11:31 (7 months ago)	GlobalProtect login attempts with user anashawley.	VPN IP Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 202.71.141.170

🇱🇹 194.165.16.165

🇦🇷 186.190.167.210

🇩🇪 165.22.26.79

🇭🇰 152.32.226.205

🇳🇱 88.151.33.226

🇸🇬 47.82.15.191

🇳🇱 45.148.10.240

🇧🇷 189.20.181.138

🇦🇷 186.139.54.151

🇺🇸 173.239.218.159

🇩🇪 167.94.146.56

🇺🇸 152.32.235.107

🇺🇸 143.42.1.52

🇨🇳 123.118.230.64

🇺🇸 91.230.168.115

🇺🇸 65.191.211.33

🇲🇾 47.250.58.33

🇧🇷 45.172.162.153

🇨🇳 42.180.4.166