JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.155.48.46

107.155.48.46 was found in our database!

This IP was reported 3,136 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇺🇸 United States of America
City	Reston, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.155.48.46

Whois 107.155.48.46

IP Abuse Reports for 107.155.48.46:

This IP address has been reported a total of 3,136 times from 908 distinct sources. 107.155.48.46 was first reported on January 19th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-03-08 09:05:31 (2 months ago)	2026-03-08 09:05:31 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇵🇱 JesionZ	2026-03-08 08:59:32 (2 months ago)	Mar 8 09:58:52 s0 sshd[4083615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Mar 8 09:58:52 s0 sshd[4083615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.46 Mar 8 09:58:54 s0 sshd[4083615]: Failed password for invalid user admin from 107.155.48.46 port 57080 ssh2 Mar 8 09:59:31 s0 sshd[4083704]: Invalid user orangepi from 107.155.48.46 port 51490 ... show less	Brute-Force SSH
Anonymous	2026-03-08 08:58:16 (2 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇨🇿 lp	2026-03-08 08:54:58 (2 months ago)	SSH Brute force: 1 attempts were recorded from 107.155.48.46 2026-03-08T08:56:46+01:00 Invalid user ... show more SSH Brute force: 1 attempts were recorded from 107.155.48.46 2026-03-08T08:56:46+01:00 Invalid user admin from 107.155.48.46 port 44730 show less	Brute-Force SSH
🇺🇸 uls0	2026-03-08 08:52:50 (2 months ago)	HELL STORM DETECTION: Identified Mirai/Gafgyt (Telnet Botnet) node. Targeted port 23. Origin: Washin ... show more HELL STORM DETECTION: Identified Mirai/Gafgyt (Telnet Botnet) node. Targeted port 23. Origin: Washington, United States. show less	Port Scan Hacking
🇹🇭 Sawasdee	2026-03-08 08:36:06 (2 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇫🇷 ISPLtd	2026-03-08 07:59:08 (2 months ago)	Mar 8 04:59:07 107.155.48.46 TCP SPT=58660 DPT=22 SYN ...	Port Scan SSH
🇵🇱 sledzik1984	2026-03-08 07:44:19 (2 months ago)	107.155.48.46 - - [08/Mar/2026:08:44:16 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 107.155.48.46 - - [08/Mar/2026:08:44:16 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-" 107.155.48.46 - - [08/Mar/2026:08:44:16 +0100] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 157 "-" "-" 107.155.48.46 - - [08/Mar/2026:08:44:18 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" ... show less	Web App Attack
🇧🇷 SOC Blue Team	2026-03-08 07:26:02 (2 months ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇫🇷 Max la Menace	2026-03-08 07:22:37 (2 months ago)	2026-03-08T08:21:57.744906+01:00 ns3124905 sshd-session[1186047]: pam_unix(sshd:auth): authenticatio ... show more 2026-03-08T08:21:57.744906+01:00 ns3124905 sshd-session[1186047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.46 2026-03-08T08:21:59.409062+01:00 ns3124905 sshd-session[1186047]: Failed password for invalid user admin from 107.155.48.46 port 39026 ssh2 2026-03-08T08:22:36.304124+01:00 ns3124905 sshd-session[1186250]: Invalid user orangepi from 107.155.48.46 port 45588 ... show less	Brute-Force SSH
🇮🇹 Rosh	2026-03-08 05:34:38 (2 months ago)	AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh)	Hacking Web App Attack
🇪🇸 masterguru	2026-03-08 05:28:59 (2 months ago)	COMODO WAF: PHP Injection Attack: I/O Stream Found. Pattern match "(?i)php://(std(in\|out\|err)\|(in\|ou ... show more COMODO WAF: PHP Injection Attack: I/O Stream Found. Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. (218420-122) show less	Hacking
🇺🇸 bigscoots.com	2026-03-08 05:27:31 (2 months ago)	(sshd) Failed SSH login from 107.155.48.46 (US/United States/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 107.155.48.46 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 7 23:25:15 14072 sshd[7951]: Invalid user admin from 107.155.48.46 port 56398 Mar 7 23:25:17 14072 sshd[7951]: Failed password for invalid user admin from 107.155.48.46 port 56398 ssh2 Mar 7 23:26:49 14072 sshd[8034]: Invalid user orangepi from 107.155.48.46 port 60404 Mar 7 23:26:51 14072 sshd[8034]: Failed password for invalid user orangepi from 107.155.48.46 port 60404 ssh2 Mar 7 23:27:26 14072 sshd[8173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.48.46 user=root show less	Brute-Force SSH
🇧🇾 lns.bz	2026-03-08 05:09:58 (2 months ago)	SSH bruteforce [BY]	SSH
🇺🇸 TPI-Abuse	2026-03-08 05:04:49 (2 months ago)	(mod_security) mod_security (id:218420) triggered by 107.155.48.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 107.155.48.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 00:04:42.825754 2026] [security2:error] [pid 1483:tid 1483] [client 107.155.48.46:33262] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.222:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.222"] [uri "/hello.world"] [unique_id "aa0DavGasrEnvDvqsoVMcAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 3106 to 3120 of 3136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.185.121.3

🇧🇷 190.89.137.46

🇨🇳 180.169.100.182

🇳🇱 172.94.9.120

🇧🇷 162.241.60.117

🇺🇸 162.216.150.150

🇺🇸 147.185.132.53

🇺🇸 143.198.150.150

🇵🇭 126.209.41.83

🇬🇧 35.203.210.240

🇧🇷 187.34.131.182

🇨🇳 120.194.6.70

🇨🇳 120.33.126.224

🇩🇪 43.165.7.135

🇮🇩 43.133.148.170

🇬🇧 35.242.161.231

🇹🇷 5.26.208.221

🇲🇽 201.165.152.79

🇬🇧 185.195.13.179

🇺🇸 181.214.48.205