JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.59

104.207.48.59 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.59

Whois 104.207.48.59

IP Abuse Reports for 104.207.48.59:

This IP address has been reported a total of 116 times from 14 distinct sources. 104.207.48.59 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-03-22 01:26:10 (2 months ago)	sae-12 : Block return, carriage return, ... characters=>/index.php?option=com_content%27&view=ar ... show more sae-12 : Block return, carriage return, ... characters=>/index.php?option=com_content%27&view=article&id=118&Itemid=557(') show less	Hacking
🇺🇸 TPI-Abuse	2026-02-19 05:14:44 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:14:37.763656 2026] [security2:error] [pid 4607:tid 4607] [client 104.207.48.59:48439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kratka.com"] [uri "/admin/.env"] [unique_id "aZacPapw75wewlV3LP5qMwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-18 22:59:03 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-18	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-02-18 17:03:11 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 12:03:04.839558 2026] [security2:error] [pid 14120:tid 14246] [client 104.207.48.59:61363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zechesfinancialservices.com"] [uri "/app/.git/config"] [unique_id "aZXwyNaahko9lRhWg9quXAAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-18 14:06:06 (3 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇩🇪 Carsten	2025-11-24 10:14:43 (6 months ago)	GET [.git/HEAD]	Port Scan
🇺🇸 TPI-Abuse	2025-11-24 09:03:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:03:15.626244 2025] [security2:error] [pid 19517:tid 19517] [client 104.207.48.59:44019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drpeppard.com"] [uri "/.git/HEAD"] [unique_id "aSQfU4NFS1t9WUhDShbL6AAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:27:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:26:58.204513 2025] [security2:error] [pid 18111:tid 18111] [client 104.207.48.59:54225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobil.belintxon.com"] [uri "/.svn/wc.db"] [unique_id "aSPsorjCMfMVU8igtEqg2QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-11-07 23:22:30 (7 months ago)	1.036 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2025-10-28 08:08:02 (7 months ago)	wordpress-trap	Web App Attack
🇺🇸 Psycho Solutions LLC	2025-10-25 18:27:49 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 10/25/2025 6:27 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2025-10-21 02:06:47 (7 months ago)	wordpress-trap	Web App Attack
🇦🇹 urnilxfgbez	2025-10-15 22:45:00 (7 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2025-04-06 21:28:18 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 15:12:04 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.62.87.27

🇺🇸 172.212.160.76

🇩🇪 167.94.146.49

🇻🇳 165.154.187.159

🇻🇳 123.30.240.7

🇩🇪 109.250.0.170

🇲🇦 105.76.183.83

🇺🇸 20.163.10.187

🇩🇪 8.211.45.218

🇩🇪 8.211.12.142

🇺🇸 5.181.219.63

🇺🇸 64.23.152.118

🇮🇹 188.219.104.210

🇮🇳 183.83.38.120

🇮🇳 115.246.239.27

🇨🇳 115.190.171.196

🇨🇳 106.117.110.106

🇮🇳 49.43.217.73

🇯🇵 45.252.188.23

🇸🇬 43.163.8.58