JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.44.15

104.207.44.15 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.44.15

Whois 104.207.44.15

IP Abuse Reports for 104.207.44.15:

This IP address has been reported a total of 91 times from 15 distinct sources. 104.207.44.15 was first reported on June 11th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-01-17 10:05:01 (4 months ago)	Request Overload (102)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 08:51:40 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 03:51:33.549466 2026] [security2:error] [pid 514:tid 514] [client 104.207.44.15:46217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fletcherdouglas.com"] [uri "/.env"] [unique_id "aWtNlVY5p41jNKTwfqCyNQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 03:42:28 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:42:25.142009 2026] [security2:error] [pid 27879:tid 27879] [client 104.207.44.15:50821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clarktec.com"] [uri "/.env"] [unique_id "aWsFIa3xI5jAq20ZIFcDfgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mr-Money	2026-01-16 23:41:00 (4 months ago)	scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: .env found within REQUEST_FILENAME: ... show more scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: .env found within REQUEST_FILENAME: /.env show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 19:26:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 14:26:50.715536 2026] [security2:error] [pid 1539120:tid 1539120] [client 104.207.44.15:25947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.teamulrich.com"] [uri "/.env"] [unique_id "aWqQ-km_0YROTomU-fHwRgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 04:29:54 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 23:29:46.452554 2026] [security2:error] [pid 14496:tid 14496] [client 104.207.44.15:27987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "savingshvac.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aWm-ug1a1379IzD4dXrsMQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-01-12 02:43:35 (4 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇩🇰 TransAdvice-Abuse	2025-12-26 17:49:21 (5 months ago)	IRC SPAM/Flood	DDoS Attack
🇮🇹 VHosting	2025-12-22 22:53:51 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-01 15:30:22 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.01 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-26 04:59:17 (7 months ago)	Attempted brute force login to web vpn 26 time(s); last attempt for 2025.10.26 is noted in report ti ... show more Attempted brute force login to web vpn 26 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force
🇧🇷 hostseries	2025-10-25 03:17:58 (7 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-10-22 23:39:04 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.10.22 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.10.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-19 22:15:34 (7 months ago)	Attempted brute force login to web vpn 80 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 80 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 23:57:24 (7 months ago)	Attempted brute force login to web vpn 74 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 74 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.70.139.75

🇬🇧 193.176.29.21

🇺🇸 165.171.148.234

🇮🇳 157.20.215.123

🇨🇿 31.222.6.154

🇳🇱 5.61.209.33

🇨🇳 223.85.102.135

🇩🇪 213.209.159.56

🇨🇳 182.113.40.7

🇧🇷 179.42.57.136

🇺🇸 172.203.190.132

🇻🇳 27.64.70.104

🇧🇷 200.155.66.2

🇺🇸 192.3.185.194

🇨🇦 138.197.161.151

🇮🇹 93.33.32.183

🇩🇪 212.227.88.225

🇨🇴 191.110.200.48

🇫🇮 147.185.133.62

🇺🇸 74.87.117.149