JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.163

104.207.48.163 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.163

Whois 104.207.48.163

IP Abuse Reports for 104.207.48.163:

This IP address has been reported a total of 139 times from 20 distinct sources. 104.207.48.163 was first reported on June 11th 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-07-13 08:45:05 (19 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 05:12:11 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 pm33	2026-05-23 04:39:01 (1 month ago)	Wordpress login attempts	Brute-Force
🇺🇸 lostswordfish.com	2026-05-22 20:28:03 (1 month ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇩🇪 stinpriza	2026-02-23 04:23:47 (4 months ago)	Web App Attack	Web App Attack
Anonymous	2026-01-16 14:30:45 (5 months ago)	wordpress-trap	Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 23:03:58 (7 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇱🇻 garmtech.com	2025-11-25 04:00:57 (7 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:49:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:49:45.894122 2025] [security2:error] [pid 7326:tid 7523] [client 104.207.48.163:51911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcp.volcano-sa.com"] [uri "/.git/HEAD"] [unique_id "aST9KdNUaJ5dFUuoaTxoIAAAAMk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:10:30 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:10:24.503880 2025] [security2:error] [pid 15650:tid 15650] [client 104.207.48.163:29901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fisseq.com"] [uri "/.env"] [unique_id "aSQS8B7oTsmjJYxP-6sQJQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:50:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:50:42.060138 2025] [security2:error] [pid 4978:tid 4978] [client 104.207.48.163:58787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automotiveforms.net"] [uri "/.git/HEAD"] [unique_id "aSQOUmHxFsJ4YhrI1k3lMwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:45:18 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:45:09.122726 2025] [security2:error] [pid 8671:tid 8671] [client 104.207.48.163:26377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jamesclarklaw.com"] [uri "/.svn/wc.db"] [unique_id "aSPw5UXQBARTJYONLrudJAAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:22:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:22:07.778423 2025] [security2:error] [pid 1549:tid 1549] [client 104.207.48.163:39063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.larsholm.com"] [uri "/.svn/wc.db"] [unique_id "aSPrf_T6KakGj4breQrOpAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:09:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:09:43.753777 2025] [security2:error] [pid 26956:tid 26956] [client 104.207.48.163:53275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wordspectrum.com"] [uri "/.svn/wc.db"] [unique_id "aSPahz-xfoRbxh04PYhIGAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:52:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:52:14.491617 2025] [security2:error] [pid 731:tid 731] [client 104.207.48.163:54045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thongtracker.com"] [uri "/.svn/wc.db"] [unique_id "aSPWbu8nvLAXcqlFH_1sHQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.61

🇭🇰 199.45.154.119

🇦🇷 186.158.183.66

🇺🇸 184.105.139.73

🇺🇸 147.185.132.243

🇹🇷 88.231.56.48

🇫🇷 83.192.43.186

🇺🇸 66.132.186.213

🇩🇪 64.226.86.7

🇺🇸 64.62.156.172

🇺🇸 64.62.156.39

🇫🇷 51.75.236.128

🇬🇧 35.203.210.247

🇬🇧 35.203.210.92

🇧🇪 34.53.212.89

🇺🇸 20.168.107.40

🇧🇷 205.210.31.243

🇺🇸 205.210.31.86

🇺🇸 205.210.31.37

🇹🇼 198.235.24.94