JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.44.154

104.207.44.154 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.44.154

Whois 104.207.44.154

IP Abuse Reports for 104.207.44.154:

This IP address has been reported a total of 134 times from 17 distinct sources. 104.207.44.154 was first reported on May 24th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 solution.it	2026-05-16 00:04:09 (4 weeks ago)	[Sat May 16 02:04:08.658204 2026] [php7:error] [pid 3872450:tid 3872450] [client 104.207.44.154:2477 ... show more [Sat May 16 02:04:08.658204 2026] [php7:error] [pid 3872450:tid 3872450] [client 104.207.44.154:24777] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-05-15 00:14:41 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.207.44.154 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.207.44.154 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 MAGIC	2026-02-22 01:20:16 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-09 17:35:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:35:52.322818 2026] [security2:error] [pid 25771:tid 25771] [client 104.207.44.154:60725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingworkingcapital.com"] [uri "/app/.env"] [unique_id "aYoa-FEUU_pSmojSA5GAeAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 11:31:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 06:31:49.035040 2026] [security2:error] [pid 3007:tid 3007] [client 104.207.44.154:58191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galeriedorion.com"] [uri "/dev/.git/config"] [unique_id "aYnFpejLUm9y1cMliB4gcQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 06:15:03 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:54.420734 2026] [security2:error] [pid 27077:tid 27087] [client 104.207.44.154:20673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.co.uk"] [uri "/api/.git/config"] [unique_id "aYl7XuWL_Kpk9k-wTjeXtwAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-02-09 01:57:47 (4 months ago)	GET /.env.production HTTP/1.1	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-23 07:31:56 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇦🇺 oncord	2026-01-03 04:21:48 (5 months ago)	Form spam	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:53 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 06:29:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:29:31.750182 2025] [security2:error] [pid 30212:tid 30212] [client 104.207.44.154:30909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jessiedavison.com"] [uri "/.svn/wc.db"] [unique_id "aSVMyxbmwipwCw9XBqejvwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 bcsaba	2025-10-30 09:14:06 (7 months ago)	CMS (WordPress or Joomla) login attempt. 104.207.44.154 - - [30/Oct/2025:10:14:03 +0100] "POST /wp-l ... show more CMS (WordPress or Joomla) login attempt. 104.207.44.154 - - [30/Oct/2025:10:14:03 +0100] "POST /wp-login.php HTTP/1.1" 200 11063 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Hacking Brute-Force Web App Attack
Anonymous	2025-10-19 20:53:25 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 23:48:49 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 09:30:56 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.143.92.55

🇫🇷 109.123.245.70

🇱🇹 91.224.92.147

🇨🇱 186.189.107.136

🇳🇱 176.65.139.56

🇮🇳 168.144.112.115

🇪🇨 149.50.204.39

🇿🇼 143.105.37.206

🇨🇭 107.189.30.49

🇦🇹 68.210.120.110

🇺🇸 68.195.25.177

🇰🇷 64.110.90.250

🇩🇪 45.136.18.250

🇻🇳 210.211.99.176

🇨🇳 183.251.237.195

🇨🇴 181.61.208.235

🇧🇷 177.128.224.122

🇺🇸 172.71.166.88

🇵🇰 157.10.7.170

🇿🇦 105.186.158.30