JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.55

104.207.48.55 was found in our database!

This IP was reported 156 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.55

Whois 104.207.48.55

IP Abuse Reports for 104.207.48.55:

This IP address has been reported a total of 156 times from 22 distinct sources. 104.207.48.55 was first reported on June 11th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-05-26 21:03:00 (1 week ago)		Web Spam
🇦🇺 oncord	2026-05-21 19:12:07 (2 weeks ago)	Form spam	Web Spam
🇨🇭 ALPHANET	2026-05-21 06:28:46 (2 weeks ago)	web exploits	Hacking Exploited Host Web App Attack
🇩🇪 Carsten	2026-05-21 01:47:51 (2 weeks ago)	GET [.env]	Port Scan
🇺🇸 nowyouknow	2026-05-20 19:50:22 (2 weeks ago)	(From [email protected]) Hey, AI is learning your competitors before it learns you Acros ... show more (From [email protected]) Hey, AI is learning your competitors before it learns you Across industries, companies are already training AI systems to: - Answer customer questions instantly - Turn visitor intent into captured leads automatically - Separate casual visitors from ready-to-act prospects - Handle repetitive support - Remove the friction created by old website flows Meanwhile, many websites are still built around: - Figure things out by clicking through pages - Navigate menus instead of asking direct questions - Fill out a form before getting any useful response That model is dying. The companies training AI now are building tomorrow's customer-attention advantage. Visitors do not want to hunt through a website. They want to ask and get answers. The business that responds first, clearly, and intelligently gets the advantage. Check it now: https://theolleh.com Regards, — Norine Simmonds Olleh When you wish to stop getting any more notifications from show less	Phishing Web Spam
🇳🇱 homeshowdomain.nl	2026-05-12 22:00:38 (3 weeks ago)	Auto-ban: >3000 req/min op 2026-05-12	Web App Attack SSH Hacking
🇱🇻 garmtech.com	2026-05-04 07:46:56 (1 month ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇬🇧 consul.to	2026-05-01 05:54:49 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 poundawebsiteltd	2026-04-27 10:12:52 (1 month ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.48.55 - - [27/Apr/2026:1 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.48.55 - - [27/Apr/2026:11:12:50 +0100] GET / HTTP/1.1 301 3334 - Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/533.1 (KHTML, like Gecko) Maxthon/3.0.8.2 Safari/533.1 show less	Web App Attack
Anonymous	2025-11-28 13:13:38 (6 months ago)	2025-11-28T15:13:38.516370+02:00 zanati wp(www.sahpa.co.za)[199602]: Blocked authentication attempt ... show more 2025-11-28T15:13:38.516370+02:00 zanati wp(www.sahpa.co.za)[199602]: Blocked authentication attempt for [email protected] from 104.207.48.55 ... show less	Web App Attack
🇩🇪 stinpriza	2025-11-28 01:53:40 (6 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:31:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:31:03.587158 2025] [security2:error] [pid 3538474:tid 3538647] [client 104.207.48.55:26415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.houstondermatology.org.aafm.us"] [uri "/.env"] [unique_id "aSaQl13wcnJA0sU4fUseJAAAAlc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 04:14:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 23:14:15.025237 2025] [security2:error] [pid 17777:tid 17777] [client 104.207.48.55:26033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.inversionestalarame.com"] [uri "/.env"] [unique_id "aSZ-lzWB7RCqUogoOTPTIQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:02:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:02:54.663746 2025] [security2:error] [pid 5070:tid 5070] [client 104.207.48.55:34443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.atlanticcitypartybuses.com"] [uri "/.svn/wc.db"] [unique_id "aSZRvomh9XUBwTedRBt02gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:50:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:50:43.540422 2025] [security2:error] [pid 6254:tid 6254] [client 104.207.48.55:20989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mrpinman.org"] [uri "/.git/HEAD"] [unique_id "aSQqc5N0H4mu8yLVaIXU4QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 172.166.156.161

🇺🇸 159.223.203.97

🇭🇰 152.32.251.44

🇳🇱 91.92.42.243

🇳🇱 45.148.10.151

🇺🇸 20.119.99.194

🇨🇳 222.73.56.10

🇰🇷 210.206.8.121

🇬🇧 193.176.29.12

🇺🇸 162.216.150.207

🇮🇩 103.219.73.193

🇧🇩 103.155.185.106

🇺🇸 65.49.1.71

🇺🇸 20.118.32.39

🇳🇱 213.177.179.154

🇺🇦 195.60.175.119

🇦🇷 190.105.81.203

🇺🇸 162.216.149.103

🇹🇭 152.32.245.27

🇷🇺 151.0.25.167