JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.54

104.207.49.54 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.54

Whois 104.207.49.54

IP Abuse Reports for 104.207.49.54:

This IP address has been reported a total of 136 times from 15 distinct sources. 104.207.49.54 was first reported on June 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-04-22 09:58:34 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-58.104.207.49.54.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-58.104.207.49.54.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-11 04:57:33 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-57.104.207.49.54.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-57.104.207.49.54.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 www.winos.me	2026-01-23 07:11:44 (4 months ago)	Banned due to high error rate on HTTP/1.1 protocol	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-01-13 12:15:18 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-15.104.207.49.54.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-15.104.207.49.54.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-01-08 08:14:15 (5 months ago)	Form spam	Web Spam
🇺🇸 oncord	2025-12-23 17:53:19 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-22 10:35:55 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-06 01:34:16 (6 months ago)	Form spam	Web Spam
🇨🇦 Peter Chargen	2025-11-24 19:34:13 (6 months ago)	PHP email form abuse/SPAM attempt	Email Spam
🇺🇸 TPI-Abuse	2025-11-24 07:50:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:50:17.338539 2025] [security2:error] [pid 29059:tid 29059] [client 104.207.49.54:12165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.familymailboxes.zombiekillabob.com"] [uri "/.env"] [unique_id "aSQOOVN2QsApn5WelvimdAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:00:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:00:45.808164 2025] [security2:error] [pid 4764:tid 4764] [client 104.207.49.54:56823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tribwatch.com"] [uri "/.svn/wc.db"] [unique_id "aSQCnT1LR1OrcQKHg-8iDgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:43:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:43:24.884436 2025] [security2:error] [pid 28884:tid 28884] [client 104.207.49.54:28787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sipkg.com"] [uri "/.svn/wc.db"] [unique_id "aSP-jJwwtjgN_dTnSpLi3gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:41:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:41:01.464460 2025] [security2:error] [pid 4101:tid 4101] [client 104.207.49.54:41777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mdivietnam.com"] [uri "/.git/HEAD"] [unique_id "aSPv7XWxAB5SE2VtYG-XrwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:55:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:55:43.039664 2025] [security2:error] [pid 13052:tid 13052] [client 104.207.49.54:49369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ralserve.net"] [uri "/.env"] [unique_id "aSPXPxQq7Ds3OcKoZ08ZtQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:40:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:40:18.863008 2025] [security2:error] [pid 29283:tid 29283] [client 104.207.49.54:9253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winestoria.vittariadesign.com"] [uri "/.env"] [unique_id "aSPTogI3P0IgaBZ8cM91iQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.234.25.243

🇺🇸 167.172.139.58

🇩🇪 161.35.65.86

🇺🇸 98.80.105.163

🇫🇷 82.67.146.32

🇺🇸 62.132.18.53

🇮🇳 59.98.15.205

🇧🇪 34.140.227.200

🇨🇳 182.105.123.10

🇳🇱 176.65.148.84

🇲🇲 103.203.135.146

🇭🇰 103.42.178.183

🇰🇬 85.113.2.22

🇩🇪 64.89.163.176

🇭🇰 43.255.118.11

🇺🇸 34.11.44.102

🇺🇸 8.229.222.230

🇹🇼 1.173.174.67

🇮🇩 203.145.34.222

🇮🇹 172.253.228.154