JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.231

104.207.48.231 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.231

Whois 104.207.48.231

IP Abuse Reports for 104.207.48.231:

This IP address has been reported a total of 130 times from 21 distinct sources. 104.207.48.231 was first reported on June 4th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-02 22:16:40 (3 days ago)	2026-06-02 00:08:56,378 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 104.207.48.231 2 ... show more 2026-06-02 00:08:56,378 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 104.207.48.231 2026-06-02 00:08:56,378 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 104.207.48.231 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-05-30 06:45:24 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-45.104.207.48.231.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-45.104.207.48.231.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-05-26 10:32:44 (1 week ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2026-05-15 13:41:16 (3 weeks ago)	(From [email protected]) Hello there, Your competitors are teaching AI their business Righ ... show more (From [email protected]) Hello there, Your competitors are teaching AI their business Right now, businesses in every industry are training AI to: - Respond to customer questions instantly - Capture leads automatically - Separate casual visitors from ready-to-act prospects - Handle repetitive support - Make the website feel less like a maze and more like a guided conversation Meanwhile most websites still depend on: - "Browse pages" - Navigate menus instead of asking direct questions - Fill out a form before getting any useful response That model is already losing strength. Businesses that teach AI their services today will be harder to compete with tomorrow. Customers are not patient browsers anymore. They ask direct questions. The business that responds first, clearly, and intelligently gets the advantage. -- See what an AI-powered website looks like: https://theolleh.com Many Thanks, — Lida Amos Olleh AI In case you wish to stop getting subsequent correspo show less	Phishing Web Spam
🇸🇮 administrator	2026-05-04 16:34:43 (1 month ago)	2026-04-14 15:12:09,492 fail2ban.actions [1104]: NOTICE [ninjafirewall] Ban 104.207.48.231 2 ... show more 2026-04-14 15:12:09,492 fail2ban.actions [1104]: NOTICE [ninjafirewall] Ban 104.207.48.231 2026-04-16 11:47:04,105 fail2ban.actions [1104]: NOTICE [ninjafirewall] Ban 104.207.48.231 2026-05-04 18:24:43,799 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 104.207.48.231 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇺🇸 windowsforum	2026-03-25 21:25:05 (2 months ago)	Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, username=JerrellSum	Web Spam Bad Web Bot
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (3 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇭 backslash	2026-01-24 22:00:04 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇦 SSH-Admin	2025-12-27 22:05:38 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:45:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:45:19.835759 2025] [security2:error] [pid 11766:tid 11766] [client 104.207.48.231:24029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.groz.net"] [uri "/.svn/wc.db"] [unique_id "aSU0X-XzWAb6zQjhA29yBwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:11:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:11:40.775710 2025] [security2:error] [pid 13337:tid 13337] [client 104.207.48.231:60223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thekingtones.com"] [uri "/.env"] [unique_id "aSUsfMA7f_jQrKMs-o7JHQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:23:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:23:20.822337 2025] [security2:error] [pid 21397:tid 21397] [client 104.207.48.231:37567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gestiofiscal.com"] [uri "/.svn/wc.db"] [unique_id "aSUhKJDzh0k7dwhgRAX7JAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:03:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:03:24.884576 2025] [security2:error] [pid 2605:tid 2605] [client 104.207.48.231:49799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.usoilinc.soviaenterprises.com"] [uri "/.svn/wc.db"] [unique_id "aSUObPYQpHWBm3oloxSGcAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:10:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:09:55.526692 2025] [security2:error] [pid 27196:tid 27196] [client 104.207.48.231:52701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxwetworld.grayhost.net"] [uri "/.git/HEAD"] [unique_id "aSUB4zIJSeG5_YAIlaQD_AAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:31:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:31:24.507327 2025] [security2:error] [pid 1590769:tid 1590778] [client 104.207.48.231:19969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aassone.com"] [uri "/.git/HEAD"] [unique_id "aST43GGwGZE4_DDLbJba5gAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:9a3::

🇳🇱 89.21.67.130

🇺🇸 66.132.172.213

🇭🇰 156.245.239.180

🇭🇰 114.111.52.109

🇳🇱 89.21.67.161

🇫🇷 62.210.209.225

🇸🇬 47.128.42.183

🇩🇪 46.225.215.191

🇮🇩 43.243.142.42

🇭🇰 23.249.28.115

🇨🇦 4.206.92.183

🇺🇸 3.214.237.244

🇳🇱 193.176.31.243

🇳🇱 185.223.235.3

🇵🇱 95.214.54.37

🇬🇧 87.236.176.44

🇳🇱 81.19.216.106

🇨🇳 113.31.124.21

🇺🇸 96.78.175.36