JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.47.153

104.207.47.153 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.47.153

Whois 104.207.47.153

IP Abuse Reports for 104.207.47.153:

This IP address has been reported a total of 144 times from 15 distinct sources. 104.207.47.153 was first reported on June 19th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-20 04:02:37 (2 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-21 01:28:25 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 20:28:22.086951 2026] [security2:error] [pid 14974:tid 14974] [client 104.207.47.153:14505] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mikeziegler.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mikeziegler.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZkKNnjo9o32TCsYZR7FVQAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-24 05:20:23 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 05:22:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:22:50.116239 2025] [security2:error] [pid 11811:tid 11811] [client 104.207.47.153:45477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.northfultonneurology.com"] [uri "/.env"] [unique_id "aSU9KsQFiEqRA-jlFca9mAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:40:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:40:35.505861 2025] [security2:error] [pid 23115:tid 23115] [client 104.207.47.153:10985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aupapierjaponais.com"] [uri "/.svn/wc.db"] [unique_id "aSUzQ_Y0XfxQ4UG4VTcqhQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:23:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:23:27.935446 2025] [security2:error] [pid 788858:tid 788858] [client 104.207.47.153:44277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coolwebsites.org"] [uri "/.env"] [unique_id "aSUvP48g5hdw5NWLS1i8sgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:48:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:48:50.941218 2025] [security2:error] [pid 17850:tid 17850] [client 104.207.47.153:19295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.studioarmanni.com"] [uri "/.git/HEAD"] [unique_id "aSUZEjX4zj1t2TaWfwxLVgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:07:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:07:10.322631 2025] [security2:error] [pid 1647140:tid 1647185] [client 104.207.47.153:50851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.learndoexplore.com"] [uri "/.git/HEAD"] [unique_id "aSUPTsWdNO_bFaD03ZYZ-gAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:21:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:21:44.206758 2025] [security2:error] [pid 26017:tid 26017] [client 104.207.47.153:39889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.haisten.net"] [uri "/.svn/wc.db"] [unique_id "aSUEqF6RK-qHdsW0qOxK_AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-17 02:40:40 (6 months ago)	(From [email protected]) The Hidden Goldmine gets people in front of 5,000,000+ buyers t ... show more (From [email protected]) The Hidden Goldmine gets people in front of 5,000,000+ buyers that pay over and over again all while AI takes care of all of the “work”. https://bookmarket.expert/TheHiddenGoldmine to UNSUBSCRIBE: https://bookmarket.expert/unsubscribe?domain=nwchiro.net Address: 108 West Street Comstock Park, MI 48721 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-12 16:14:49 (6 months ago)	(From [email protected]) World's FIRST AI System That Creates PROFITABLE Amazon Books In Und ... show more (From [email protected]) World's FIRST AI System That Creates PROFITABLE Amazon Books In Under 6 Minutes Across 25+ Niches https://goldsolutions.pro/RoyaltyProfitsAI to UNSUBSCRIBE: https://goldsolutions.pro/unsubscribe?domain=bompchiro.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-12 06:24:29 (6 months ago)	(From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITIN ... show more (From [email protected]) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT FROM EBOOKS… NO WRITING REQUIRED PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content! https://viewbet-24.site/eBookWriterAI to UNSUBSCRIBE: https://viewbet-24.site/unsubscribe?domain=kuehlchiro.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-12 03:53:10 (6 months ago)	(From [email protected]) SOFTWARE: New AI Cloud-Tool Quietly Turns Simple Ideas Into Passive ... show more (From [email protected]) SOFTWARE: New AI Cloud-Tool Quietly Turns Simple Ideas Into Passive Royalties.... ...No tech. No product. No audience. Just this one AI tool. https://www.novaai.expert/OhanashiGenAI to UNSUBSCRIBE: https://www.novaai.expert/unsubscribe?domain=ehschiro.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇭🇺 bcsaba	2025-11-09 00:19:10 (6 months ago)	SQL injection attempt. 104.207.47.153 - - [09/Nov/2025:01:19:08 +0100] "GET /scripts/view.php?Itemid ... show more SQL injection attempt. 104.207.47.153 - - [09/Nov/2025:01:19:08 +0100] "GET /scripts/view.php?Itemid=38&id=505&option=com_content&szam=2025-10-29&task=view&task=%27&testulet=5 HTTP/1.1" 200 686 "-" "Mozilla/5.0 (Linux; Android 9; ASUS_I005DA Build/PI; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/133.0.6943.122 Mobile" show less	SQL Injection Web App Attack
Anonymous	2025-10-18 06:59:58 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 190.117.96.174

🇺🇸 62.132.18.53

🇺🇿 213.230.87.251

🇦🇹 159.100.24.182

🇺🇸 147.185.132.227

🇮🇳 143.110.177.177

🇮🇳 139.59.30.229

🇻🇳 116.110.0.137

🇮🇹 109.53.129.82

🇺🇸 64.227.109.89

🇧🇷 177.22.41.167

🇨🇳 101.96.200.79

🇯🇵 54.248.17.61

🇳🇱 45.87.43.112

🇳🇱 5.255.121.146

🇺🇸 216.25.89.78

🇨🇳 180.116.57.246

🇺🇸 172.237.136.85

🇩🇪 167.94.146.44

🇨🇳 120.76.98.153