JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.49.87

104.207.49.87 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.49.87

Whois 104.207.49.87

IP Abuse Reports for 104.207.49.87:

This IP address has been reported a total of 139 times from 13 distinct sources. 104.207.49.87 was first reported on June 7th 2024, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-02 23:03:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:03:37.413302 2025] [security2:error] [pid 15816:tid 15816] [client 104.207.49.87:27251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thinkerblox.com"] [uri "/.svn/wc.db"] [unique_id "aS9wSUO8B_uiB0idWn7vMwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:15:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:15:19.927122 2025] [security2:error] [pid 17422:tid 17422] [client 104.207.49.87:15673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwiller.com"] [uri "/.svn/wc.db"] [unique_id "aS86x7J7LFMEDvSuS3PdVQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:43:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:42:59.359377 2025] [security2:error] [pid 20243:tid 20255] [client 104.207.49.87:16047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "castaspell.com"] [uri "/.git/HEAD"] [unique_id "aS58Y_Nx4HONv5aRH_9T_gAAAMo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:41:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.49.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:40:56.594194 2025] [security2:error] [pid 22747:tid 22747] [client 104.207.49.87:21835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrismonty.com"] [uri "/.git/HEAD"] [unique_id "aS5t2Iv2HIZz6legS4gluQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-26 01:56:53 (7 months ago)	wordpress-trap	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-25 13:21:25 (7 months ago)	WP Admin Scan Activities	Web App Attack
Anonymous	2025-10-25 08:33:58 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-24 17:24:50 (7 months ago)	wordpress-trap	Web App Attack
🇺🇸 Psycho Solutions LLC	2025-10-20 04:40:58 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-content/ - User Agent: N/ ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-content/ - User Agent: N/A - Timestamp: 10/20/2025 4:40 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇫🇮 as211431.net	2025-10-20 00:44:20 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-admin/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-18 00:57:14 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-17 02:38:38 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-16 00:40:27 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-14 06:41:26 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-13 05:52:31 (7 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇱 192.109.220.211

🇮🇩 182.8.211.27

🇷🇴 2.57.121.25

🇨🇳 120.238.23.168

🇨🇳 113.0.152.164

🇺🇸 104.152.52.125

🇺🇸 104.28.214.122

🇮🇩 103.160.37.151

🇮🇳 103.87.105.191

🇨🇦 85.217.149.56

🇹🇷 85.105.46.199

🇮🇹 79.12.1.240

🇩🇪 69.5.169.242

🇮🇶 65.20.135.97

🇳🇱 45.148.10.157

🇺🇸 43.162.112.238

🇬🇧 35.203.210.219

🇧🇷 34.95.170.81

🇸🇬 198.38.91.141

🇨🇱 186.105.3.222