JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.113

104.207.49.113 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.113

Whois 104.207.49.113

IP Abuse Reports for 104.207.49.113:

This IP address has been reported a total of 131 times from 17 distinct sources. 104.207.49.113 was first reported on June 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-10 04:55:08 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-09 10:52:26 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-07 01:11:29 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-05-06 17:04:45 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-05 08:59:30 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:46:03 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-25 10:16:41 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-14 01:26:39 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.113 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 eacontent	2026-01-19 13:00:00 (4 months ago)	2x eg 104.207.49.113 - - [15/Jan/2026:22:56:27 -0500] "GET /config.php%7C/.env%7Csettings.py HTTP/1 ... show more 2x eg 104.207.49.113 - - [15/Jan/2026:22:56:27 -0500] "GET /config.php%7C/.env%7Csettings.py HTTP/1.1" 404 34 "-" "Mozilla/5.0 (Linux; Android 5.0.1; GT-I9500) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" show less	Hacking
🇳🇱 homeshowdomain.nl	2026-01-16 22:59:24 (4 months ago)	Auto-ban: >3000 req/min op 2026-01-16	Hacking Web App Attack SSH
🇦🇺 oncord	2025-12-20 00:01:49 (5 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-12-03 09:21:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 04:21:00.613131 2025] [security2:error] [pid 5013:tid 5013] [client 104.207.49.113:52493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "switkoprofiri.org"] [uri "/.svn/wc.db"] [unique_id "aTAA_CGM5eEF51bL9A3l9AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:08:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:08:23.720942 2025] [security2:error] [pid 19080:tid 19080] [client 104.207.49.113:60649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cswiki.us"] [uri "/.svn/wc.db"] [unique_id "aSanZ3xHffjtOAa6j3gaPQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:46:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:46:27.149411 2025] [security2:error] [pid 27857:tid 27857] [client 104.207.49.113:51479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.boardingatthewedge.com"] [uri "/.git/HEAD"] [unique_id "aSaUM11rzCeHWrtbiXYqQAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:29:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:29:46.838962 2025] [security2:error] [pid 10322:tid 10322] [client 104.207.49.113:27903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.13point5.com"] [uri "/.git/HEAD"] [unique_id "aSaQSrHz2dnYlB5k9oWSoAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 153.75.80.77

🇺🇸 216.25.89.142

🇷🇺 188.225.71.170

🇩🇪 134.122.93.100

🇻🇳 103.153.254.96

🇺🇸 91.230.168.184

🇳🇱 81.19.216.109

🇺🇸 74.63.28.236

🇫🇮 65.108.247.88

🇺🇸 40.124.175.155

🇬🇧 35.203.211.249

🇭🇰 2a09:bac5:398c:2646::3d0:2e

🇧🇬 79.124.59.78

🇰🇿 46.42.230.107

🇳🇱 45.156.87.166

🇧🇷 201.55.142.244

🇻🇳 171.228.231.106

🇦🇷 131.196.82.217

🇨🇳 60.13.6.163

🇩🇪 44.149.3.126