JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.50

104.207.48.50 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 31%: ?

31%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.50

Whois 104.207.48.50

IP Abuse Reports for 104.207.48.50:

This IP address has been reported a total of 138 times from 20 distinct sources. 104.207.48.50 was first reported on June 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bescared	2026-07-20 20:56:44 (1 week ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-07-20 20:22:18 (1 week ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits. show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-19 21:59:49 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-19	Web App Attack SSH Hacking
🇺🇸 daveoctober	2026-07-19 18:57:48 (1 week ago)	October Sentinel: honeypot triggered	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-19 17:06:31 (1 week ago)	Try to access /.git/HEAD	Web App Attack
🇩🇪 Hazzard	2026-05-21 19:57:00 (2 months ago)	(wordpress) Failed wordpress login from 104.207.48.50 (BR/Brazil/São Paulo/São Paulo/-/[redacted]): ... show more (wordpress) Failed wordpress login from 104.207.48.50 (BR/Brazil/São Paulo/São Paulo/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 iNetWorker	2026-05-21 17:44:03 (2 months ago)	trolling for resource vulnerabilities	Web App Attack
🇬🇧 PeravixGroup	2026-05-07 10:00:12 (2 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-01-15 01:13:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 20:13:22.740815 2026] [security2:error] [pid 973819:tid 973819] [client 104.207.48.50:24007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyber507.net"] [uri "/.git/HEAD"] [unique_id "aWg_MrfRhd9c2e0zRb99zQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:37:32 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:37:27.997338 2025] [security2:error] [pid 3738190:tid 3738260] [client 104.207.48.50:31831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.eliteproductions.tv"] [uri "/.git/HEAD"] [unique_id "aSa8R9ynXzP7IZS7N5-pPQAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:45:55 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:45:49.945739 2025] [security2:error] [pid 23584:tid 23584] [client 104.207.48.50:23409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.exploratorymusic.net"] [uri "/.git/HEAD"] [unique_id "aSaiHTJtPyeuMg9UmdKEjwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 11:05:13 (8 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:16:12 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:16:08.372088 2025] [security2:error] [pid 12232:tid 12232] [client 104.207.48.50:43507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.visionremota.info"] [uri "/.svn/wc.db"] [unique_id "aSQiWFIapi0xidiGL_2eDgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:41:54 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:41:46.227969 2025] [security2:error] [pid 26046:tid 26046] [client 104.207.48.50:22745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aethena.org"] [uri "/.svn/wc.db"] [unique_id "aSQMOmbinHsaaEjuz7pW0gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:26:01 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:25:57.441935 2025] [security2:error] [pid 14843:tid 14868] [client 104.207.48.50:56535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aglsolidwaste.com"] [uri "/.svn/wc.db"] [unique_id "aSPeVV0D_Mes39tIl2r3WQAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.25

🇭🇹 200.113.217.63

🇸🇬 152.42.165.47

🇺🇸 135.237.122.43

🇹🇼 123.58.205.100

🇨🇳 117.14.157.220

🇳🇱 45.153.34.186

🇺🇸 13.89.124.211

🇪🇨 201.183.54.218

🇦🇷 181.46.68.160

🇲🇽 177.226.67.238

🇬🇧 167.99.206.241

🇩🇪 167.94.146.52

🇺🇸 162.216.149.138

🇨🇳 116.181.11.193

🇩🇪 107.150.117.127

🇺🇸 107.0.200.227

🇦🇺 74.91.200.217

🇫🇷 62.210.142.61

🇩🇪 45.135.141.7