JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.47.18

104.207.47.18 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.47.18

Whois 104.207.47.18

IP Abuse Reports for 104.207.47.18:

This IP address has been reported a total of 86 times from 20 distinct sources. 104.207.47.18 was first reported on June 6th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Reinhard	2026-05-30 19:26:11 (6 days ago)	Unclassified dangerous activity detected.	Hacking
🇺🇸 nowyouknow	2026-04-18 11:11:18 (1 month ago)	(From [email protected]) Hi Oatka Chiropractic, I’ve built and trained an AI employee s ... show more (From [email protected]) Hi Oatka Chiropractic, I’ve built and trained an AI employee specifically for Oatka Chiropractic. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
Anonymous	2026-02-15 04:31:17 (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 F242	2026-01-30 05:12:47 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇲🇹 Malta	2026-01-30 03:37:31 (4 months ago)	104.207.47.18 - - [30/Jan/2026:04:37:31 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 104.207.47.18 - - [30/Jan/2026:04:37:31 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	VPN IP Hacking Web App Attack
Anonymous	2025-12-30 01:42:37 (5 months ago)	2025-12-30T03:42:37.682821+02:00 zanati wp(www.sahpa.co.za)[593954]: Blocked authentication attempt ... show more 2025-12-30T03:42:37.682821+02:00 zanati wp(www.sahpa.co.za)[593954]: Blocked authentication attempt for [email protected] from 104.207.47.18 ... show less	Web App Attack
🇦🇺 MAGIC	2025-12-28 03:03:36 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-09 15:04:52 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 10:04:46.576632 2025] [security2:error] [pid 21099:tid 21099] [client 104.207.47.18:28757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honweneedthis.com"] [uri "/.svn/wc.db"] [unique_id "aTg6jrqZDk231_RNEeZElQAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 05:15:37 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 00:15:29.778586 2025] [security2:error] [pid 10560:tid 10560] [client 104.207.47.18:14279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "va-designers.com"] [uri "/.svn/wc.db"] [unique_id "aTewccxGbXz3q0z3nsS1rQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 04:38:23 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 23:38:15.928117 2025] [security2:error] [pid 14493:tid 14493] [client 104.207.47.18:38145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gepteszt.com"] [uri "/.git/HEAD"] [unique_id "aTent7aSe8JWusDHaK8A0wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 04:41:23 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 23:41:16.779509 2025] [security2:error] [pid 26016:tid 26016] [client 104.207.47.18:36349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richmondrents.com"] [uri "/.git/HEAD"] [unique_id "aTZW7CEm12t_f13WDj1TbwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 12:47:41 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:47:37.777791 2025] [security2:error] [pid 17816:tid 17816] [client 104.207.47.18:53011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "copanmaya.org"] [uri "/.svn/wc.db"] [unique_id "aTV3afTTjOZ0smIyWVbN5QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 11:53:03 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:53:00.289958 2025] [security2:error] [pid 11572:tid 11600] [client 104.207.47.18:35541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catslife.net"] [uri "/.git/HEAD"] [unique_id "aTQZHLPLApkvKXdJVyP5eAAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-12-06 01:59:31 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.47.18 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.47.18 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 08:14:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:14:09.650682 2025] [security2:error] [pid 6979:tid 6979] [client 104.207.47.18:31937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "simplesimulations.com"] [uri "/.svn/wc.db"] [unique_id "aTKUUZBJ60D2JJGcwZlU7QAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 80.94.92.164

🇺🇸 74.125.40.90

🇬🇧 194.50.235.136

🇺🇸 184.154.206.137

🇻🇳 183.80.214.208

🇺🇸 173.244.60.155

🇵🇱 81.210.53.105

🇷🇴 2.57.121.112

🇻🇳 171.244.37.103

🇫🇮 147.185.133.44

🇨🇳 114.248.8.47

🇭🇰 114.111.52.109

🇵🇹 85.240.193.104

🇮🇳 61.3.202.13

🇨🇳 58.19.143.104

🇺🇸 40.124.173.235

🇨🇳 39.96.159.29

🇷🇴 2.57.122.177

🇧🇪 2a00:1450:400c:c1d::127

🇺🇸 209.141.41.212