JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.32.13

104.207.32.13 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.32.13

Whois 104.207.32.13

IP Abuse Reports for 104.207.32.13:

This IP address has been reported a total of 92 times from 20 distinct sources. 104.207.32.13 was first reported on June 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-13 23:25:22 (1 month ago)	Attempt to scan vulnerabilities	Hacking
Anonymous	2026-04-12 05:57:17 (1 month ago)	Attempt to scan vulnerabilities	Hacking
🇺🇸 Epimetheus	2026-01-15 10:04:38 (4 months ago)	Unauthorized access attempts: From: 104.207.32.13 Method: HTTP GET URI Path: /.svn/wc.db UA: ... show more Unauthorized access attempts: From: 104.207.32.13 Method: HTTP GET URI Path: /.svn/wc.db UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 myagent.site	2026-01-15 08:39:41 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇪🇸 el-brujo	2026-01-01 16:19:38 (5 months ago)	01/Jan/2026:17:19:38.090142 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 01/Jan/2026:17:19:38.090142 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 104.207.32.13] ModSecurity: Rule 55e37983aac8 [id "932110"][file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "256"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "www.hostench.eu"] [uri "/wp-json/contact-form-7/v1/contact-forms/296/feedback"] [unique_id "aVaemmwA4EZ4TG_csvEZjwAFFSk"] ... show less	Hacking Web App Attack
🇦🇺 oncord	2025-12-31 00:05:59 (5 months ago)	Form spam	Web Spam
🇬🇧 Swiptly	2025-12-30 07:41:44 (5 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:30:05 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:29:57.412673 2025] [security2:error] [pid 23371:tid 23371] [client 104.207.32.13:15279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intergalactichuman.com"] [uri "/.git/HEAD"] [unique_id "aVI8Bd4AXt3sP0ZD7WHO4QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:56:13 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:56:07.673406 2025] [security2:error] [pid 2742:tid 2742] [client 104.207.32.13:57755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdcservices.com"] [uri "/.env"] [unique_id "aVIX9yUvpFO8qgFTQBQq5wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-12-24 06:46:17 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 VHosting	2025-12-24 06:35:15 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 nowyouknow	2025-12-17 01:09:51 (5 months ago)	(From [email protected]) Ready to send more visitors to wakespinerehab.com? ... show more (From [email protected]) Ready to send more visitors to wakespinerehab.com? Get your Free Demo. Details available here: https://rb.gy/kkhq2m To unsubscribe, please reply with subject: Unsubscribe !wakespinerehab.com show less	Phishing Web Spam
🇮🇹 Rosh	2025-11-18 10:51:48 (6 months ago)	[11/18/25 11:51:47] Too many requests	Brute-Force Web App Attack
Anonymous	2025-11-14 17:29:31 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-10-23 08:29:49 (7 months ago)	(From [email protected]) Hello, Want more visitors and clients for your nwchiro.net? ... show more (From [email protected]) Hello, Want more visitors and clients for your nwchiro.net? As a bonus, we can offer you a free SEO Audit and a free SEO Backlinks service. We help websites get real visitors and real clients through proven online marketing methods. Would you like a quick free analysis of your site’s potential? Best regards, Lynne from Digital Marketing Team Norway, NA, Drammen, 3044, Austadgangen 135 To stop any further communication through your website form, Please reply with subject: Unsubscribe !nwchiro.net show less	Phishing Web Spam

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 197.245.173.18

🇺🇸 2604:a880:400:d1:0:4:8c0e:a001

🇺🇸 2604:a880:400:d1:0:4:8c0a:1

🇪🇬 197.162.161.208

🇸🇬 134.185.85.99

🇳🇱 107.189.24.77

🇺🇸 100.50.17.159

🇬🇧 51.195.215.143

🇬🇧 51.195.183.199

🇩🇪 213.209.159.11

🇲🇼 196.216.13.153

🇧🇷 191.178.194.235

🇨🇱 172.253.219.29

🇺🇸 147.185.132.101

🇩🇪 147.45.197.250

🇨🇦 142.44.149.52

🇺🇸 66.132.195.60

🇬🇧 51.89.129.218

🇺🇸 45.56.83.110

🇪🇹 196.191.144.171