JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.208

104.207.49.208 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.208

Whois 104.207.49.208

IP Abuse Reports for 104.207.49.208:

This IP address has been reported a total of 127 times from 12 distinct sources. 104.207.49.208 was first reported on June 4th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-04-02 21:00:31 (2 months ago)	Double URL encoding detection. Threat Score: 8.1/10 (CRITICAL). Confidence: 60%. CVSS v3.1: 7.3/10 ( ... show more Double URL encoding detection. Threat Score: 8.1/10 (CRITICAL). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 93%. MITRE ATT&CK: T1110 (Brute Force). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-02 19:57:00 (2 months ago)	[WAZUH] Double URL encoding detection	Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:21 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-24 09:18:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:17:55.103189 2025] [security2:error] [pid 17328:tid 17328] [client 104.207.49.208:47077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thomasgardner.com"] [uri "/.svn/wc.db"] [unique_id "aSQiw8Z-RtG4Db-P4zXcvQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:52:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:52:52.277515 2025] [security2:error] [pid 964:tid 964] [client 104.207.49.208:9323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thegoldreserve.com"] [uri "/.svn/wc.db"] [unique_id "aSQc5F90llx0qrMHTEswiAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:00:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:00:40.342354 2025] [security2:error] [pid 24144:tid 24171] [client 104.207.49.208:34777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.koalacogs.com"] [uri "/.svn/wc.db"] [unique_id "aSQQqB5NRA0YlS5iH1nngwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:45:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:44:54.446806 2025] [security2:error] [pid 13942:tid 14027] [client 104.207.49.208:25405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.opticaldesignconcepts.com"] [uri "/.git/HEAD"] [unique_id "aSP-5g9TCbHXOd9uq_d3ZAAAAc8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:31:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:31:02.596497 2025] [security2:error] [pid 27719:tid 27719] [client 104.207.49.208:10001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.comobarbershop.com"] [uri "/.svn/wc.db"] [unique_id "aSPtllU97y5GluCWw_nfoQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:40:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:40:49.380281 2025] [security2:error] [pid 15366:tid 15366] [client 104.207.49.208:9505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.forsythfixit.com"] [uri "/.git/HEAD"] [unique_id "aSPh0bkU3t1uX3W6cbVQ2wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-10 23:38:42 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 23:58:51 (7 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 06:07:08 (7 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 05:33:21 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 20:25:48 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 08:01:59 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c72::123

🇺🇸 173.199.92.33

🇺🇸 159.89.228.57

🇺🇸 137.184.145.60

🇨🇳 111.26.177.216

🇹🇭 150.95.27.209

🇮🇳 103.25.47.94

🇫🇷 91.196.152.34

🇺🇸 68.178.206.62

🇮🇳 202.141.36.205

🇬🇧 195.206.182.207

🇹🇷 185.226.93.120

🇲🇽 134.168.249.198

🇷🇴 80.94.95.242

🇳🇱 45.148.10.147

🇺🇸 40.78.155.180

🇵🇰 39.50.238.77

🇫🇷 2a02:4780:27:2156:0:1d6a:1c32:1

🇱🇰 220.247.224.226

🇨🇳 180.167.207.234