JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.170

104.207.49.170 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 66%: ?

66%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.170

Whois 104.207.49.170

IP Abuse Reports for 104.207.49.170:

This IP address has been reported a total of 141 times from 26 distinct sources. 104.207.49.170 was first reported on June 11th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-25 23:48:18 (2 hours ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇬🇷 setupgr	2026-06-24 19:56:07 (1 day ago)	(mod_security) mod_security (id:900001) triggered by 104.207.49.170 (BR/Brazil/SÃ£o Paulo/SÃ£o Paulo ... show more (mod_security) mod_security (id:900001) triggered by 104.207.49.170 (BR/Brazil/SÃ£o Paulo/SÃ£o Paulo/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 24 22:56:02.772368 2026] [security2:error] [pid 278467:tid 278525] [client 104.207.49.170:43025] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "mail.asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "ajw2UqSNZdupCMVf4ZV_QQAAAEg"], referer: https://mail.asteriassantorini.com/wp-login.php show less	Port Scan
🇫🇮 6kilowatti	2026-06-23 09:37:56 (2 days ago)	104.207.49.170 - - [23/Jun/2026:12:37:55 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6 ... show more 104.207.49.170 - - [23/Jun/2026:12:37:55 +0300] "POST /wp-login.php HTTP/1.1" 404 12994 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 104.207.49.170 - [23/Jun/2026:12:37:55 +0300] "POST /wp-login.php HTTP/1.1" 404 12288 "https://oh6ah.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ... show less	Web App Attack
🇬🇧 spamverify.com	2026-06-22 16:04:28 (3 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-22 15:20:37 (3 days ago)	(mod_security) mod_security (id:900001) triggered by 104.207.49.170 (BR/Brazil/SÃ£o Paulo/SÃ£o Paulo ... show more (mod_security) mod_security (id:900001) triggered by 104.207.49.170 (BR/Brazil/SÃ£o Paulo/SÃ£o Paulo/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 18:20:35.395404 2026] [security2:error] [pid 1934813:tid 1934929] [client 104.207.49.170:18399] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.pankoskal.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.pankoskal.gr"] [uri "/wp-login.php"] [unique_id "ajlSw_VHAYoCTqtXWiWgZwAAAIc"], referer: https://mail.pankoskal.gr/wp-login.php show less	Port Scan
Anonymous	2026-06-21 20:19:20 (4 days ago)	[server.tmg.gr] httpd-login-spray-site: sites=tmg.gr.forms; logs=/var/log/httpd/domains/tmg.gr.forms ... show more [server.tmg.gr] httpd-login-spray-site: sites=tmg.gr.forms; logs=/var/log/httpd/domains/tmg.gr.forms.log; samples=site_wide=true \| distinct_ips=17 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 pm33	2026-06-17 13:50:39 (1 week ago)	Wordpress login attempts	Brute-Force
🇲🇽 octageeks.com	2026-06-16 04:11:34 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 london2038.com	2026-06-16 01:18:44 (1 week ago)	Detected by WP fail2ban 2026-06-16T03:18:43.618159+02:00 wordpress: Authentication attempt from 104. ... show more Detected by WP fail2ban 2026-06-16T03:18:43.618159+02:00 wordpress: Authentication attempt from 104.207.49.170 show less	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-06-15 07:18:03 (1 week ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇺🇸 dtorrer	2026-06-14 12:58:19 (1 week ago)	Brute-force general attack.	Brute-Force
🇲🇹 Malta	2026-06-14 12:26:16 (1 week ago)	104.207.49.170 - - [14/Jun/2026:14:26:16 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 104.207.49.170 - - [14/Jun/2026:14:26:16 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇳🇿 billyborsht	2026-06-13 02:48:48 (1 week ago)	2026-06-13T14:48:47.688447+12:00 southern wordpress(klezmer.co.nz)[676447]: Authentication attempt f ... show more 2026-06-13T14:48:47.688447+12:00 southern wordpress(klezmer.co.nz)[676447]: Authentication attempt for unknown user wertuslash from 104.207.49.170 ... show less	Hacking Web App Attack
🇲🇹 Malta	2026-06-11 15:52:41 (2 weeks ago)	104.207.49.170 - - [11/Jun/2026:17:52:40 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 104.207.49.170 - - [11/Jun/2026:17:52:40 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
Anonymous	2026-06-10 17:19:54 (2 weeks ago)	Web attack blocked by Wordfence on vestingstadvalkenburg.nl (1 hit). Reported by CRMON.	Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 192.71.2.5

🇫🇷 91.231.89.90

🇺🇸 2607:f8b0:4001:c11::129

🇹🇼 198.235.24.64

🇺🇸 195.184.76.95

🇩🇪 185.30.32.9

🇺🇸 172.234.221.84

🇺🇸 172.222.52.59

🇨🇳 121.229.156.75

🇬🇧 82.197.75.147

🇷🇴 80.94.92.55

🇩🇪 46.101.180.162

🇳🇱 45.156.87.93

🇹🇼 35.229.249.121

🇸🇬 35.187.231.181

🇧🇪 35.187.41.22

🇳🇱 34.34.5.122

🇭🇰 199.45.154.156

🇳🇱 192.144.89.219

🇧🇷 177.99.193.135