JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.101

104.207.48.101 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 44%: ?

44%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.101

Whois 104.207.48.101

IP Abuse Reports for 104.207.48.101:

This IP address has been reported a total of 145 times from 25 distinct sources. 104.207.48.101 was first reported on June 22nd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-04 04:13:51 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇮🇹 Progetto1	2026-06-02 21:30:04 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 lostswordfish.com	2026-06-01 17:02:04 (1 week ago)	Wordfence waf block on hope4scranton	Web App Attack
🇬🇧 spamverify.com	2026-06-01 00:19:53 (1 week ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 pm33	2026-05-31 19:37:34 (1 week ago)	Wordpress login attempts	Brute-Force
🇲🇽 octageeks.com	2026-05-29 04:09:06 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 raph	2026-05-29 03:49:06 (2 weeks ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇩🇪 F242	2026-05-28 02:39:00 (2 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 georgengelmann	2026-05-22 04:32:28 (3 weeks ago)	Failed login attempt for admin	Brute-Force Web App Attack
Anonymous	2026-04-22 18:26:11 (1 month ago)	Web App Attack, Hacking	Hacking Web App Attack
🇨🇭 4server	2026-04-21 18:31:10 (1 month ago)	[TueApr2120:31:05.7240132026][security2:error][pid2996689:tid2996782][client104.207.48.101:0]ModSecu ... show more [TueApr2120:31:05.7240132026][security2:error][pid2996689:tid2996782][client104.207.48.101:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\[\?\(url\\|link$\?=\?\\\\\"\?\?https\?://.\\\\\\\\\[\?$url\\|link$\?=\?\\\\\"\?\?https\?://.\\\\\\\\\[\?$url\\|link$\?=\?\\\\\"\?\?https\?://.\\\\\\\\\[\?$url\\|link$\?=\?\\\\\"\?\?https\?:/\\|$\\\\\\\\[\?\(url\\|link$\?\\\\\\\\]https\?://.\\\\\\\\\[\?/\?$url\\|link$\?\\\\\\\\].\*\){4\,}\)\"atARGS:message.[file\"/etc/apache2/conf.d/modsec_rules/30_asl_antispam.conf\"][line\"126\"][id\"300079\"][rev\"18\"][msg\"Atomicorp.comWAFAntiSpamRules:PossibleSpam:Multipleembeddedurlsinargument$Disableifyouwishtoallow4ormoreURLsinapost$\"][data\"7810foundwithinARGS:message:[url=https://www.grepmed.com/valproato_de_sodio_donde_lo_venden]https://www.grepmed.com/valproato_de_sodio_donde_lo_venden[/url][url=https://www.grepmed.com/tamoxifeno_en_usa]https://www.grepmed.com/tamoxifeno_en_usa[/url][url=https://www.grepmed.com/donde_comprar_tamsulosina]htt show less	Hacking Web App Attack
🇩🇪 4server	2026-04-21 09:16:38 (1 month ago)	[TueApr2111:16:34.1038962026][security2:error][pid3025243:tid3025325][client104.207.48.101:0]ModSecu ... show more [TueApr2111:16:34.1038962026][security2:error][pid3025243:tid3025325][client104.207.48.101:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"chesasilva.ch\"][uri\"/database.sql\"][unique_id\"aedAcmR1Z2zCLsvvYp9dYQAAAEo\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 dtorrer	2026-04-04 14:13:42 (2 months ago)	Client attempted to submit spam on a website post.	Blog Spam
🇺🇸 TPI-Abuse	2026-02-24 11:15:30 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.48.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.48.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 06:15:24.280608 2026] [security2:error] [pid 8292:tid 8292] [client 104.207.48.101:16457] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gonzalez.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ2ITEXGAC86fKN191ZiVAAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-01-02 21:25:03 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.235

🇳🇱 176.65.139.103

🇨🇦 35.183.24.150

🇺🇸 3.16.151.235

🇩🇪 213.209.159.158

🇩🇪 213.209.159.11

🇺🇸 193.19.109.175

🇧🇷 191.233.234.186

🇺🇸 147.185.132.230

🇺🇸 64.225.60.187

🇦🇺 54.206.113.83

🇲🇾 47.254.213.222

🇷🇴 2.57.122.238

🇨🇳 124.89.89.146

🇱🇻 91.105.20.128

🇩🇪 77.64.178.219

🇺🇸 66.132.195.27

🇭🇰 43.161.217.219

🇦🇺 34.151.162.60

🇺🇸 2602:80d:1007::6d