JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.32.49

104.207.32.49 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.32.49

Whois 104.207.32.49

IP Abuse Reports for 104.207.32.49:

This IP address has been reported a total of 132 times from 17 distinct sources. 104.207.32.49 was first reported on June 19th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-06-02 22:39:57 (1 day ago)	[Wed Jun 03 00:39:57.328961 2026] [authz_core:error] [pid 2090297:tid 2090371] [remote 104.207.32.49 ... show more [Wed Jun 03 00:39:57.328961 2026] [authz_core:error] [pid 2090297:tid 2090371] [remote 104.207.32.49:30933] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php show less	Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-05-19 22:25:53 (2 weeks ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 10:58:17 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 05:58:11.700453 2025] [security2:error] [pid 17307:tid 17307] [client 104.207.32.49:15297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schonplanet.com"] [uri "/.svn/wc.db"] [unique_id "aVJew8LsvhVtqOS11p-XZwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:34:23 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:34:20.371051 2025] [security2:error] [pid 2372:tid 2372] [client 104.207.32.49:52085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "derekvantreese.com"] [uri "/.git/HEAD"] [unique_id "aVI9DHxO8CWanNySWgiV3gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:55:15 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:55:07.837491 2025] [security2:error] [pid 2644682:tid 2644692] [client 104.207.32.49:52647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tributetomarilyn.com"] [uri "/.git/HEAD"] [unique_id "aVIXu4bE9pXjh74wbNaDewAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:38:33 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:38:24.854330 2025] [security2:error] [pid 21990:tid 22014] [client 104.207.32.49:34209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "htpsocal.com"] [uri "/.svn/wc.db"] [unique_id "aVIFwAEZ57qDUnmwicnKhwAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-24 05:25:43 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-19 07:33:39 (6 months ago)	Attempted brute force login to web vpn 14 time(s); last attempt for 2025.11.19 is noted in report ti ... show more Attempted brute force login to web vpn 14 time(s); last attempt for 2025.11.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 02:42:16 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-11 02:21:28 (6 months ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.11.11 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.11.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-08 20:03:21 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.08 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.08 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 octageeks.com	2025-10-28 04:06:42 (7 months ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇩🇪 ps-center	2025-10-25 23:33:18 (7 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
🇳🇱 EGP Abuse Dept	2025-10-24 06:58:13 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2025-10-18 07:14:47 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇺 194.149.60.90

🇨🇳 117.132.5.139

🇭🇰 101.36.111.155

🇯🇵 8.209.234.120

🇹🇼 220.134.77.159

🇰🇷 220.121.38.45

🇭🇰 218.250.28.248

🇮🇳 203.163.238.35

🇨🇷 200.229.8.181

🇧🇩 114.130.85.36

🇰🇷 112.216.129.27

🇳🇱 89.21.67.157

🇬🇧 18.133.199.181

🇳🇱 5.61.209.33

🇺🇸 208.84.100.28

🇵🇰 202.142.154.99

🇮🇳 182.76.66.186

🇺🇸 172.253.195.214

🇺🇸 172.236.126.127

🇸🇬 172.217.44.213