JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.207

104.207.49.207 was found in our database!

This IP was reported 153 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.207

Whois 104.207.49.207

IP Abuse Reports for 104.207.49.207:

This IP address has been reported a total of 153 times from 25 distinct sources. 104.207.49.207 was first reported on June 14th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2026-05-16 06:20:02 (3 weeks ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-19 22:59:17 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-19	Web App Attack SSH Hacking
🇺🇸 Starburst SysOp Team	2026-01-08 10:46:10 (4 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 104.207.49.207 (BR/Brazil/São Paulo/São ... show more (mod_security-custom) mod_security (id:210492) triggered by 104.207.49.207 (BR/Brazil/São Paulo/São Paulo/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇺🇸 TPI-Abuse	2025-12-30 10:59:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 05:59:22.581713 2025] [security2:error] [pid 27127:tid 27127] [client 104.207.49.207:33551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aliciagrant.com"] [uri "/.svn/wc.db"] [unique_id "aVOwirYj3H3hR1FvpW0hQwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:53 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-12-19 00:04:57 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2025-11-26 09:48:09 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-48.104.207.49.207.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-48.104.207.49.207.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:51:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:51:37.235617 2025] [security2:error] [pid 32746:tid 32746] [client 104.207.49.207:17987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bayinsights.com"] [uri "/.svn/wc.db"] [unique_id "aSU12VTTAhDLcjwdnkl9nQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:42:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:42:28.147543 2025] [security2:error] [pid 745393:tid 745393] [client 104.207.49.207:9903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.synercom.org"] [uri "/.svn/wc.db"] [unique_id "aSUlpMu-JBdQe43WMHtQ4gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:58:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:58:21.510765 2025] [security2:error] [pid 30599:tid 30599] [client 104.207.49.207:22407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.linneus.com"] [uri "/.svn/wc.db"] [unique_id "aSUNPbdBs_cHEvom9ssdNQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-11-23 00:34:47 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-10-31 16:59:49 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2025-10-24 08:30:14 (7 months ago)	WAF: Block IP which is in the web-spammers RBL 2- wsit	Email Spam Brute-Force
Anonymous	2025-10-19 05:29:32 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 07:30:08 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 51.68.226.87

🇺🇸 47.251.35.109

🇳🇱 45.148.10.151

🇲🇳 203.23.199.88

🇸🇪 158.174.210.161

🇨🇳 123.4.226.192

🇺🇿 84.54.122.149

🇱🇹 77.90.185.230

🇺🇸 2604:a880:400:d1:0:4:8c07:1

🇺🇸 209.250.5.234

🇵🇰 182.180.154.234

🇩🇪 167.94.146.37

🇺🇸 157.254.174.96

🇨🇳 101.37.35.156

🇬🇧 45.82.76.109

🇺🇸 40.77.167.75

🇵🇦 190.97.165.93

🇸🇪 155.4.31.215

🇧🇩 118.179.89.81

🇮🇹 79.3.96.178