JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.207.48.236

Activity Trending Down

Abuse Confidence Score

9% Caution

139 reports

19 reporters · latest 1 week ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇨🇦 Canada
City: Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

139 from 19 distinct reporters

First reported

June 11th 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1 🇺🇸 United States of America 1

Most common categories Fraud VoIP 1 Brute-Force 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 francelink.fr	2026-10-31 18:53:28 UTC · (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T18:51:36.000Z.	Web App Attack
🇩🇪 paneologist	2026-09-15 07:51:38 UTC · (1 month ago)	2026-09-08T13:00:08+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:62264\) 2026-09-08T14:13:47+02:00 theta asterisk\[17133\]: WARNING\[ ... show more 2026-09-08T13:00:08+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:62264\) 2026-09-08T14:13:47+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:51702\) 2026-09-08T15:32:56+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:10862\) 2026-09-08T17:54:10+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:30723\) 2026-09-08T19:51:58+02:00 theta asterisk\[17133\]: WARNING\[24074\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:47389\) 2026-09-08T21:27:14+02:00 theta asterisk\[17133\]: NOTICE\[24074\]: res_pjsip/pj show less	Fraud VoIP Brute-Force
🇩🇪 paneologist	2026-09-13 18:22:40 UTC · (1 month ago)	2026-09-08T13:00:08+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:62264\) 2026-09-08T14:13:47+02:00 theta asterisk\[17133\]: WARNING\[ ... show more 2026-09-08T13:00:08+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:62264\) 2026-09-08T14:13:47+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:51702\) 2026-09-08T15:32:56+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:10862\) 2026-09-08T17:54:10+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:30723\) 2026-09-08T19:51:58+02:00 theta asterisk\[17133\]: WARNING\[24074\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:47389\) 2026-09-08T21:27:14+02:00 theta asterisk\[17133\]: NOTICE\[24074\]: res_pjsip/pj show less	Fraud VoIP Brute-Force
🇩🇪 paneologist	2026-09-08 22:19:54 UTC · (2 months ago)	2026-09-08T13:00:08+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:62264\) 2026-09-08T14:13:47+02:00 theta asterisk\[17133\]: WARNING\[ ... show more 2026-09-08T13:00:08+02:00 theta asterisk\[17133\]: WARNING\[17469\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:62264\) 2026-09-08T14:13:47+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:51702\) 2026-09-08T15:32:56+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:10862\) 2026-09-08T17:54:10+02:00 theta asterisk\[17133\]: WARNING\[684\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:30723\) 2026-09-08T19:51:58+02:00 theta asterisk\[17133\]: WARNING\[24074\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.48.236:47389\) 2026-09-08T21:27:14+02:00 theta asterisk\[17133\]: NOTICE\[24074\]: res_pjsip/pj show less	Fraud VoIP Brute-Force
🇸🇪 shab	2026-09-03 03:05:49 UTC · (2 months ago)	Suspicious VPN activity	Brute-Force
🇨🇭 backslash	2026-08-02 04:51:00 UTC · (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Sklurk	2026-08-01 02:59:40 UTC · (3 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 02:26:36 UTC · (3 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-30 00:56:55 UTC · (3 months ago)	Web App Attack	Web App Attack
Anonymous	2026-03-24 15:20:04 UTC · (7 months ago)	\| [Dangerous/China] Aggressive IP 104.207.48.236 (~30 hits). Type: DoS Defender- Web server 400 error code	Web App Attack Hacking SQL Injection
🇨🇭 filou812	2026-02-10 07:07:50 UTC · (9 months ago)	url tried is "/.aws/credentials"	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:39:05 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:39:02.097113 2026] [security2:error] [pid 32013:tid 32013] [client 104.207.48.236:44161] ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:39:02.097113 2026] [security2:error] [pid 32013:tid 32013] [client 104.207.48.236:44161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garrettkirkland.com"] [uri "/.env"] [unique_id "aYpT9vKxOohSkWQUqi3kPwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 18:28:07 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:27:59.703262 2026] [security2:error] [pid 15230:tid 15230] [client 104.207.48.236:46491] ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:27:59.703262 2026] [security2:error] [pid 15230:tid 15230] [client 104.207.48.236:46491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "futureproductionsonline.com"] [uri "/admin/.env"] [unique_id "aYonLzRK0HQxo_2BUkjC8wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 06:14:34 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:23.352101 2026] [security2:error] [pid 9168:tid 9172] [client 104.207.48.236:53825] M ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:23.352101 2026] [security2:error] [pid 9168:tid 9172] [client 104.207.48.236:53825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.co.uk"] [uri "/.git/config"] [unique_id "aYl7P-eaTQ9a1qvEhHBJLgAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 11:20:50 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 06:20:42.734670 2026] [security2:error] [pid 30225:tid 30225] [client 104.207.48.236:0] Mod ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.236 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 06:20:42.734670 2026] [security2:error] [pid 30225:tid 30225] [client 104.207.48.236:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colonybet.com"] [uri "/.env"] [unique_id "aWjNioyOdiEECHczlyfsLAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇹 196.188.93.169

🇳🇱 195.178.110.30

🇺🇸 166.62.41.13

🇵🇰 153.117.8.49

🇹🇼 124.219.31.130

🇲🇾 110.4.47.194

🇸🇬 47.128.49.58

🇳🇱 45.148.10.141

🇺🇸 23.94.73.235

🇺🇾 186.48.23.66

🇺🇸 162.216.149.3

🇺🇸 147.185.132.124

🇺🇸 138.199.43.84

🇧🇩 103.41.244.22

🇺🇸 66.132.159.42

🇺🇸 44.192.38.186

🇯🇵 43.165.190.208

🇺🇸 43.135.148.92

🇰🇷 220.118.44.213

🇳🇱 213.209.159.26