JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.231

104.207.49.231 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.231

Whois 104.207.49.231

IP Abuse Reports for 104.207.49.231:

This IP address has been reported a total of 146 times from 18 distinct sources. 104.207.49.231 was first reported on June 5th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 solution.it	2026-05-09 10:16:06 (4 weeks ago)	[Sat May 09 12:16:06.028302 2026] [php7:error] [pid 2112965:tid 2112965] [client 104.207.49.231:1178 ... show more [Sat May 09 12:16:06.028302 2026] [php7:error] [pid 2112965:tid 2112965] [client 104.207.49.231:11785] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-05-06 16:25:04 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-02 00:51:57 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:45:42 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-23 17:22:05 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-19 00:30:00 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-18 14:45:08 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-13 10:33:48 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-13 10:13:23 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-02-13 13:54:24 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:54:19.396532 2026] [security2:error] [pid 5666:tid 5666] [client 104.207.49.231:35523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leanoperationstransformation.com"] [uri "/.env.production"] [unique_id "aY8tCyBnBhSDHkPJZ5UWAQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 09:09:50 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:09:45.673615 2026] [security2:error] [pid 7200:tid 7325] [client 104.207.49.231:22161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metropaint.net"] [uri "/.env.save"] [unique_id "aY7qWXLNZktt2VIeVivBHwAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:42:20 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:42:11.483169 2026] [security2:error] [pid 9231:tid 9231] [client 104.207.49.231:46519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "med-engineering.com"] [uri "/test/.git/config"] [unique_id "aY7Hw_-WSeugx8JLx0JvIQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:09:44 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:09:37.650361 2026] [security2:error] [pid 2628457:tid 2628457] [client 104.207.49.231:45551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mathiasaspelin.com"] [uri "/dev/.git/config"] [unique_id "aY6yEX_fRabDYpJw3-PohwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-02-13 04:35:09 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.49.231 (BR/Brazil/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.49.231 (BR/Brazil/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 myagent.site	2026-02-13 03:31:28 (3 months ago)	Blocking for trying to access an exploit file: /test/.git/config	Hacking

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 217.201.170.216

🇷🇺 193.233.48.169

🇨🇳 180.76.143.203

🇰🇷 114.202.253.7

🇱🇻 104.245.241.104

🇳🇱 176.65.149.139

🇺🇸 154.83.197.90

🇺🇸 152.32.206.247

🇨🇳 120.52.12.202

🇨🇦 85.217.149.40

🇳🇱 85.11.167.7

🇩🇪 64.226.67.80

🇺🇸 52.54.15.103

🇱🇹 45.227.254.170

🇳🇱 45.148.10.141

🇬🇧 193.163.125.98

🇲🇽 186.96.145.241

🇮🇩 182.253.153.132

🇦🇫 180.94.75.114

🇺🇸 173.255.223.73