JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.13

104.207.48.13 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.13

Whois 104.207.48.13

IP Abuse Reports for 104.207.48.13:

This IP address has been reported a total of 81 times from 16 distinct sources. 104.207.48.13 was first reported on June 6th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Progetto1	2026-02-12 04:50:03 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 04:20:31 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 23:20:27.071922 2026] [security2:error] [pid 5416:tid 5435] [client 104.207.48.13:23491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthansl.com"] [uri "/.git/config"] [unique_id "aY1VC8EhaZCp14XQisj3hgAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 05:13:42 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:13:37.233757 2026] [security2:error] [pid 14342:tid 14342] [client 104.207.48.13:58121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ieas.org"] [uri "/admin/.env"] [unique_id "aYq-gYVr_T8LJB5qzpZE5wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:28:00 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:27:56.804939 2026] [security2:error] [pid 9942:tid 9942] [client 104.207.48.13:24415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirklandhighlands.org"] [uri "/app/.env"] [unique_id "aYqlvPuaJBohEMxjuGx9vAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 23:38:46 (3 months ago)	Blocking for trying to access an exploit file: /backup/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-09 23:11:37 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:11:12.748616 2026] [security2:error] [pid 1422:tid 1422] [client 104.207.48.13:55227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hppagewideflorida.com"] [uri "/admin/.git/config"] [unique_id "aYppkAbYNTe4YaWi5ORr4AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:09:42 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:09:35.438518 2026] [security2:error] [pid 16661:tid 16661] [client 104.207.48.13:58599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karenjoyce.com"] [uri "/app/.git/config"] [unique_id "aYpND_oynNP3HvWRGg8HpgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-19 10:53:39 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-04-06 07:10:43 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 05:53:22 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 18:43:51 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 21:30:43 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 23:18:18 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-01 18:27:56 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.01 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-31 07:52:22 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.03.31 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.03.31 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 216.155.93.75

🇺🇿 213.230.108.143

🇭🇷 188.252.188.171

🇷🇺 158.58.133.185

🇩🇪 139.19.117.131

🇳🇱 91.92.42.133

🇪🇹 196.188.116.56

🇳🇱 176.65.139.56

🇺🇸 149.115.147.91

🇵🇱 143.20.97.127

🇨🇳 121.225.55.155

🇨🇳 111.61.117.120

🇨🇱 101.44.10.88

🇳🇱 45.8.17.109

🇺🇸 18.97.26.107

🇲🇽 186.96.145.241

🇩🇪 178.254.33.75

🇺🇸 147.185.132.16

🇷🇺 94.243.9.250

🇱🇹 81.30.98.49