JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.217

104.207.48.217 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.217

Whois 104.207.48.217

IP Abuse Reports for 104.207.48.217:

This IP address has been reported a total of 129 times from 17 distinct sources. 104.207.48.217 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-27 16:46:55 (4 months ago)	2026-01-27T18:46:54.793737+02:00 zanati wp(www.sahpa.co.za)[786122]: Blocked authentication attempt ... show more 2026-01-27T18:46:54.793737+02:00 zanati wp(www.sahpa.co.za)[786122]: Blocked authentication attempt for [email protected] from 104.207.48.217 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 07:54:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 02:54:30.379384 2026] [security2:error] [pid 5617:tid 5617] [client 104.207.48.217:34201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kristasrecoverycoaching.com.kildarafarms.com"] [uri "/.env"] [unique_id "aWtANrY_IzSpHUIKkpeobgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-17 03:15:33 (4 months ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 Jean Valjean	2026-01-04 17:38:48 (5 months ago)	Fail2ban Caboom : xmlrpc.php Abuse	SQL Injection Web App Attack
🇦🇺 afleventoffice.com.au	2025-12-31 02:36:24 (5 months ago)	GET /wp-login.php HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2025-12-31 01:51:44 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 20:51:40.339706 2025] [security2:error] [pid 988727:tid 988741] [client 104.207.48.217:31053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.selecttech.org"] [uri "/.svn/wc.db"] [unique_id "aVSBrF8-FV7n5yAh1JEteAAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-30 08:26:51 (5 months ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 11:49:49 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:49:41.527432 2025] [security2:error] [pid 23851:tid 23851] [client 104.207.48.217:22305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lexingtonlimobus.com"] [uri "/.git/HEAD"] [unique_id "aVJq1T6GJS2nA9Agz2ERJQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 10:55:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 05:55:24.635115 2025] [security2:error] [pid 6219:tid 6219] [client 104.207.48.217:55231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dutchgreenrecycling.com"] [uri "/.env"] [unique_id "aVJeHAFQvTGgXo8UT20bCgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:04:46 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:04:39.380338 2025] [security2:error] [pid 19351:tid 19351] [client 104.207.48.217:53919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirbysmw.com"] [uri "/.env"] [unique_id "aVH91zhEZLxnYRjcNZnZEgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-10-26 15:42:44 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-04-06 22:24:22 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 12:51:39 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 05:00:58 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 21:14:47 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 178.105.210.107

🇺🇸 52.173.123.151

🇬🇧 5.226.140.120

🇺🇸 2604:a880:400:d1:0:4:8bee:7001

🇧🇷 205.210.31.217

🇯🇵 160.251.185.39

🇺🇸 2607:f8b0:4001:c14::127

🇫🇷 85.217.140.4

🇩🇪 85.215.107.193

🇫🇷 84.247.143.90

🇱🇺 46.151.182.54

🇨🇭 20.199.211.161

🇩🇪 5.83.135.102

🇸🇬 172.217.47.24

🇳🇱 45.153.34.181

🇳🇱 45.148.10.152

🇺🇸 20.64.104.65

🇰🇷 220.86.28.189

🇨🇦 212.104.215.131

🇬🇧 209.97.180.115