JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.192

104.207.49.192 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.192

Whois 104.207.49.192

IP Abuse Reports for 104.207.49.192:

This IP address has been reported a total of 155 times from 23 distinct sources. 104.207.49.192 was first reported on June 5th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-07-13 08:41:12 (2 days ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-07-08 01:09:28 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 06:28:24 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 01:28:19.975972 2026] [security2:error] [pid 23495:tid 23495] [client 104.207.49.192:18123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artsun.com"] [uri "/.env.local"] [unique_id "aY1zA6HC7OOONYbtzC-1igAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 02:08:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:08:26.571440 2026] [security2:error] [pid 3354:tid 3354] [client 104.207.49.192:49679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arresteddevelopmentinsight.com"] [uri "/.env.production"] [unique_id "aY02Gu_hDds-fk1OsXoRfQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 20:18:33 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 15:18:26.427251 2026] [security2:error] [pid 9794:tid 9794] [client 104.207.49.192:25895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archmediaptyltd.com"] [uri "/.env.production"] [unique_id "aYzkEtJBfk5fcptM06wc7gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 04:09:07 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:09:03.309691 2026] [security2:error] [pid 29530:tid 29530] [client 104.207.49.192:53981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iceofparadise.com"] [uri "/.git/config"] [unique_id "aYqvX_MtQ65yiFqabhxU_wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:53:43 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:53:29.160744 2026] [security2:error] [pid 2738886:tid 2738886] [client 104.207.49.192:33057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittencream.com"] [uri "/site/.git/config"] [unique_id "aYqrub4hPeTs8b0vL3kr4QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 02:52:17 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:52:14.619026 2026] [security2:error] [pid 1521:tid 1521] [client 104.207.49.192:63449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingdombuilderschurchmd.org"] [uri "/api/.env"] [unique_id "aYqdXivLU_TkJOOSHoo2lgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:42:54 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:42:45.755488 2026] [security2:error] [pid 22545:tid 22545] [client 104.207.49.192:30437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelticdreamsranch.com"] [uri "/backend/.env"] [unique_id "aYpw9XyysA2xme25d_vx9wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-09 23:39:46 (5 months ago)	Blocking for trying to access an exploit file: /test/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-09 22:23:08 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:23:01.768953 2026] [security2:error] [pid 1536874:tid 1536874] [client 104.207.49.192:64703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotwheelguide.com"] [uri "/.env.production"] [unique_id "aYpeRVrodYtG7_-JEzcu0wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-01-20 21:48:26 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇩🇪 paissangroup	2026-01-04 03:50:16 (6 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 octageeks.com	2025-12-24 05:06:31 (6 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 11:52:03 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:51:56.795278 2025] [security2:error] [pid 3738122:tid 3738181] [client 104.207.49.192:59743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jd-web-designs.com"] [uri "/.git/HEAD"] [unique_id "aSbp3Fb15STYbNZie7hWCQAAAVU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a09:bac5:27bb:18f0::27c:77

🇮🇳 223.188.16.38

🇨🇳 222.85.211.12

🇨🇳 218.86.171.216

🇺🇸 216.25.89.157

🇺🇿 188.113.215.22

🇺🇸 162.216.149.132

🇰🇷 118.38.44.223

🇨🇳 116.53.130.4

🇨🇳 115.51.91.104

🇺🇸 109.105.209.67

🇫🇷 91.231.89.6

🇨🇦 85.217.149.66

🇰🇿 85.193.98.24

🇻🇳 27.79.42.236

🇬🇹 24.152.52.2

🇧🇬 5.188.206.34

🇨🇳 222.215.240.29

🇬🇧 188.240.59.62

🇦🇺 170.64.156.181