JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.1

104.207.49.1 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.1

Whois 104.207.49.1

IP Abuse Reports for 104.207.49.1:

This IP address has been reported a total of 70 times from 17 distinct sources. 104.207.49.1 was first reported on June 7th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Reinhard	2026-06-02 22:56:42 (3 days ago)	Unclassified dangerous activity detected.	Hacking
🇮🇪 AutosOnShow	2026-04-02 16:08:05 (2 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-04-02 16:07:05.477 \|	Web App Attack
🇺🇸 myagent.site	2026-01-13 11:55:16 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-11-26 05:26:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:26:34.779277 2025] [security2:error] [pid 2844:tid 2844] [client 104.207.49.1:57547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.trispeccorp.com"] [uri "/.env"] [unique_id "aSaPigZrzY0R85SpS74h-wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:44:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:44:43.317267 2025] [security2:error] [pid 28050:tid 28050] [client 104.207.49.1:13859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.disneylawsuit.com"] [uri "/.git/HEAD"] [unique_id "aSZNe6zJMuHnAVJY0BHa_wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:26:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:25:58.364135 2025] [security2:error] [pid 5959:tid 5959] [client 104.207.49.1:36433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cartiologyfilms.com"] [uri "/.git/HEAD"] [unique_id "aSZJFvvDJP-A8A2RrLRD4AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:30:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:30:01.552826 2025] [security2:error] [pid 243843:tid 243858] [client 104.207.49.1:50845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bizbox.brucejoell.com"] [uri "/.git/HEAD"] [unique_id "aSQlme8rpg2XuyQKt47GsQAAAYs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-17 05:16:35 (6 months ago)	(From [email protected]) This Isn't A Course. It's A Fully Functional, Done-For-You Business ... show more (From [email protected]) This Isn't A Course. It's A Fully Functional, Done-For-You Business... Powered Entirely By AI https://buycelebrex-generic.site/ConverslyAI to UNSUBSCRIBE: https://buycelebrex-generic.site/unsubscribe?domain=drgeorgechiroinlakeville.com Address: 108 West Street Comstock Park, MI 48721 show less	Phishing Web Spam
🇦🇺 oncord	2025-11-09 21:49:30 (6 months ago)	Form spam	Web Spam
Anonymous	2025-10-16 12:03:51 (7 months ago)	WordPress Brute Force	Brute-Force
🇩🇪 NetWatch	2025-09-29 00:44:17 (8 months ago)	The IP 104.207.49.1 tried multiple SSH logins	Brute-Force SSH
Anonymous	2025-04-07 01:37:07 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 01:59:30 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 02:47:03 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 23:35:44 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇬🇧 213.171.208.232

🇩🇪 167.94.145.44

🇫🇮 147.185.133.108

🇺🇸 136.144.33.51

🇺🇸 74.125.80.152

🇺🇸 64.62.156.160

🇹🇷 31.145.39.232

🇺🇸 17.132.70.129

🇧🇩 14.128.15.191

🇸🇬 2a09:bac1:6540:8::3c5:36

🇵🇾 132.255.164.117

🇮🇳 103.185.212.159

🇺🇸 96.78.175.41

🇨🇿 82.118.30.94

🇷🇴 80.94.92.171

🇱🇹 62.60.130.75

🇺🇸 17.132.70.131

🇨🇳 14.29.184.206

🇮🇪 2a05:d018:10df:d401:ba0a:11f8:f11f:9bbc