JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.93

104.207.48.93 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.93

Whois 104.207.48.93

IP Abuse Reports for 104.207.48.93:

This IP address has been reported a total of 122 times from 14 distinct sources. 104.207.48.93 was first reported on June 4th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-06-03 15:19:34 (3 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 dtorrer	2026-05-29 21:37:50 (1 week ago)	Brute-force general attack.	Brute-Force
Anonymous	2026-05-26 08:42:18 (1 week ago)	[server.tmg.gr] httpd-login-spray-site: sites=add2021.gr; logs=/var/log/httpd/domains/add2021.gr.log ... show more [server.tmg.gr] httpd-login-spray-site: sites=add2021.gr; logs=/var/log/httpd/domains/add2021.gr.log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-05-23 09:42:04 (2 weeks ago)	Wordfence waf block on secure	Web App Attack
🇬🇧 openstrike.co.uk	2025-12-05 06:13:56 (6 months ago)	2 attacks on password grabbing URLs: GET /.aws/credentials HTTP/1.1	Hacking
🇺🇸 TPI-Abuse	2025-11-25 06:27:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:27:18.814711 2025] [security2:error] [pid 24582:tid 24582] [client 104.207.48.93:51581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lemontreefoods.com"] [uri "/.svn/wc.db"] [unique_id "aSVMRllLCgHKFkcj8uXW7QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:06:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:06:00.768899 2025] [security2:error] [pid 22676:tid 22676] [client 104.207.48.93:9027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heavenonearthonline.net"] [uri "/.git/HEAD"] [unique_id "aSU5OEzh40rVN3ynzBh0UQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:42:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:41:56.068576 2025] [security2:error] [pid 1816811:tid 1816980] [client 104.207.48.93:48133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vanessa.santos.name"] [uri "/.env"] [unique_id "aSUlhO3xOpFSh0Wflctr0QAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:05:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:04:50.106408 2025] [security2:error] [pid 22430:tid 22430] [client 104.207.48.93:14717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crescentcitycafe.com"] [uri "/.svn/wc.db"] [unique_id "aSUOwsqfXsYl6-tcEgGgrwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:03:03 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:02:49.808858 2025] [security2:error] [pid 32734:tid 32738] [client 104.207.48.93:47393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.southtampaprints.com"] [uri "/.env"] [unique_id "aSUAOSrPMGOurG3RzwY4MwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-07 03:33:01 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 23:16:28 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 22:21:57 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 19:53:41 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 22:36:48 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 185.233.3.95

🇨🇳 121.227.152.250

🇬🇧 85.203.46.139

🇩🇪 82.25.102.2

🇺🇸 205.210.31.84

🇺🇸 162.216.150.16

🇮🇳 152.52.245.142

🇵🇹 87.103.126.54

🇺🇿 84.54.76.55

🇺🇸 65.49.1.234

🇺🇸 47.251.174.175

🇺🇸 44.220.185.38

🇺🇸 40.77.167.42

🇨🇳 39.107.55.186

🇬🇧 35.203.211.10

🇸🇬 4.194.3.176

🇰🇷 1.245.74.10

🇳🇱 185.242.226.91

🇫🇮 147.185.133.192

🇩🇪 87.123.15.130