JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.140

104.207.48.140 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.140

Whois 104.207.48.140

IP Abuse Reports for 104.207.48.140:

This IP address has been reported a total of 136 times from 17 distinct sources. 104.207.48.140 was first reported on June 7th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-23 05:13:17 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 02:05:55 (6 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:31:12 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:31:04.187453 2026] [security2:error] [pid 2014:tid 2014] [client 104.207.48.140:62431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gardenstateakitaclub.org"] [uri "/backend/.env"] [unique_id "aYpSGNB0BdAMKyghHsctswAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 20:34:48 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:34:35.163441 2026] [security2:error] [pid 19338:tid 19420] [client 104.207.48.140:38295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gamecrazy.us"] [uri "/site/.git/config"] [unique_id "aYpE2YWE2kxo01YgpUqeIwAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 08:14:38 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 03:14:31.170760 2026] [security2:error] [pid 13240:tid 13240] [client 104.207.48.140:47913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullbladderclub.com"] [uri "/test/.git/config"] [unique_id "aYmXZ_P6o5q_EmK8Eu4kSwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 06:14:05 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:01.728300 2026] [security2:error] [pid 7743:tid 7743] [client 104.207.48.140:21889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furbabieslivesmatter.com"] [uri "/.env.production"] [unique_id "aYl7KWJa2MYKbv4ZAkPghgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
Anonymous	2026-01-10 22:50:09 (5 months ago)	wordpress-trap	Web App Attack
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇳🇿 billyborsht	2025-10-27 06:14:07 (7 months ago)	2025-10-27T19:14:06.562226+13:00 southern wordpress(leanpolicy.org)[486897]: Authentication attempt ... show more 2025-10-27T19:14:06.562226+13:00 southern wordpress(leanpolicy.org)[486897]: Authentication attempt for unknown user leanpolicy.org from 104.207.48.140 ... show less	Hacking Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-27 03:58:29 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇫🇷 Phenix Info	2025-10-24 07:05:45 (8 months ago)	SSH Login failed	Brute-Force SSH
Anonymous	2025-10-11 01:28:05 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 20:17:34 (8 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 15:53:22 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.137.130.157

🇬🇧 185.166.43.186

🇳🇱 45.148.10.151

🇲🇽 45.134.9.27

🇨🇳 222.90.239.188

🇳🇱 193.176.31.242

🇸🇷 190.98.110.78

🇳🇱 185.242.226.87

🇮🇩 182.253.123.61

🇲🇩 178.17.171.234

🇨🇱 170.79.235.140

🇧🇼 168.167.72.132

🇺🇸 159.223.191.100

🇺🇸 76.49.199.97

🇺🇸 71.27.86.44

🇸🇦 51.36.43.120

🇨🇳 43.247.250.115

🇬🇧 35.203.210.155

🇧🇪 34.62.239.38

🇳🇱 31.14.32.8