JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.138

104.207.49.138 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.138

Whois 104.207.49.138

IP Abuse Reports for 104.207.49.138:

This IP address has been reported a total of 124 times from 13 distinct sources. 104.207.49.138 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-01-19 02:07:52 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-08 22:55:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 17:55:03.495388 2025] [security2:error] [pid 29198:tid 29198] [client 104.207.49.138:16781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schwanpaint.com"] [uri "/.env"] [unique_id "aTdXR2JbNjeuD0B4gC_u4QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 16:19:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:19:32.512716 2025] [security2:error] [pid 5789:tid 5789] [client 104.207.49.138:51821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nanchy.net"] [uri "/.svn/wc.db"] [unique_id "aTRXlLo95MBTi_R4W9dm-wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 03:33:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 22:32:57.044532 2025] [security2:error] [pid 14780:tid 14780] [client 104.207.49.138:23355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proyectomanhattan.info"] [uri "/.env"] [unique_id "aTOj6bm_nAsdAlD3I-d8twAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 21:31:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 16:31:05.202564 2025] [security2:error] [pid 21444:tid 21444] [client 104.207.49.138:30389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.svn/wc.db"] [unique_id "aTNPGc39W3PRrcIOXEXldwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 06:57:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:57:03.076540 2025] [security2:error] [pid 13491:tid 13491] [client 104.207.49.138:39237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesteeldrumman.com"] [uri "/.git/HEAD"] [unique_id "aTKCPydKnHf3n6Wm4yVd8QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-12-04 19:25:16 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-25.104.207.49.138.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-25.104.207.49.138.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇹 Rosh	2025-10-27 03:58:19 (7 months ago)	[10/27/25 04:58:19] SSH: illegal login attempts	Brute-Force SSH
Anonymous	2025-04-07 00:53:12 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 14:34:09 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 15:00:17 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 21:18:52 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-01 15:50:08 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.01 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-31 16:48:12 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.03.31 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.03.31 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-30 22:17:32 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.03.30 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.03.30 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.55

🇳🇱 176.65.139.99

🇳🇱 176.65.139.11

🇧🇷 167.249.227.120

🇰🇷 121.168.122.109

🇫🇷 85.217.140.24

🇺🇸 2600:1004:b2d6:a367:859e:a2de:b94e:da0b

🇺🇸 207.90.244.3

🇬🇧 193.163.125.128

🇺🇸 191.96.67.101

🇧🇷 187.17.228.218

🇵🇰 119.160.215.53

🇰🇿 46.8.79.202

🇬🇧 45.82.76.107

🇺🇸 34.24.23.122

🇦🇫 203.171.115.98

🇨🇱 200.27.90.81

🇦🇫 149.54.11.76

🇲🇾 148.253.49.8

🇩🇪 139.162.155.161