JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.47

104.207.48.47 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.47

Whois 104.207.48.47

IP Abuse Reports for 104.207.48.47:

This IP address has been reported a total of 126 times from 15 distinct sources. 104.207.48.47 was first reported on June 28th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-02-15 09:55:47 (3 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇫🇷 ✨	2026-02-09 01:54:13 (3 months ago)	Domain : cleaners.greenleaflaundry.co.uk Rule : wp-login 2026-02-09 01:53:08 *hidden-privacy* GE ... show more Domain : cleaners.greenleaflaundry.co.uk Rule : wp-login 2026-02-09 01:53:08 *hidden-privacy* GET /wp-login.php - 443 - 104.207.48.47 HTTP/2 Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 - cleaners.greenleaflaundry.co.uk 404 0 2 1527 471 107 - - show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:59:51 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-26 10:20:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:20:13.408503 2025] [security2:error] [pid 13818:tid 13818] [client 104.207.48.47:16483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jeffmccoskey.banis-associates.com"] [uri "/.svn/wc.db"] [unique_id "aSbUXVrpNgZ0iHjr5RaGPQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:25:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:25:35.559038 2025] [security2:error] [pid 24923:tid 24923] [client 104.207.48.47:24753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisdomsco.systemcapacityoptimization.com"] [uri "/.git/HEAD"] [unique_id "aSaPTyV_NwpcjYcMSGZIjQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:12:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:12:26.687712 2025] [security2:error] [pid 8663:tid 8663] [client 104.207.48.47:54347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.militaryordnance.com"] [uri "/.svn/wc.db"] [unique_id "aSZwGjD7dPTHUbK1FhbbagAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:57:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:56:54.706933 2025] [security2:error] [pid 21267:tid 21267] [client 104.207.48.47:9153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.unitedwestandent.org"] [uri "/.svn/wc.db"] [unique_id "aSZsdnqVlIe67Ey7VCAaLAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:03:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:03:46.178071 2025] [security2:error] [pid 2133956:tid 2133956] [client 104.207.48.47:44353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ajwood.net"] [uri "/.env"] [unique_id "aSZD4sZn8FRDugl5piom8wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:20:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:20:26.301039 2025] [security2:error] [pid 13757:tid 13822] [client 104.207.48.47:57521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wedgwoodclub.com"] [uri "/.env"] [unique_id "aSU8mr2j_Ew1xiyiewwgBAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-07 03:26:09 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 18:07:12 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 21:36:41 (1 year ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 13:47:49 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 23:06:50 (1 year ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2025-04-03 19:50:03 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.76.15.221

🇪🇬 156.209.88.84

🇮🇳 62.72.28.225

🇩🇪 195.248.243.247

🇸🇪 171.25.158.58

🇺🇸 2602:80d:1008::1f

🇧🇪 198.235.24.235

🇲🇽 189.157.45.41

🇳🇱 176.65.139.140

🇺🇸 162.216.149.54

🇩🇪 159.195.147.215

🇩🇪 45.86.202.157

🇨🇳 27.128.171.39

🇩🇪 141.11.250.239

🇺🇸 99.108.166.16

🇨🇱 216.155.93.75

🇸🇪 188.151.176.48

🇺🇸 162.216.149.233

🇲🇾 115.135.233.75

🇻🇳 103.48.83.92