JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.44.159

104.207.44.159 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.44.159

Whois 104.207.44.159

IP Abuse Reports for 104.207.44.159:

This IP address has been reported a total of 132 times from 20 distinct sources. 104.207.44.159 was first reported on June 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-04-17 21:22:11 (1 month ago)	[Fri Apr 17 23:22:10.888504 2026] [authz_core:error] [pid 289056:tid 289154] [remote 104.207.44.159: ... show more [Fri Apr 17 23:22:10.888504 2026] [authz_core:error] [pid 289056:tid 289154] [remote 104.207.44.159:59397] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-21 12:53:12 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 07:53:09.169334 2026] [security2:error] [pid 25292:tid 25292] [client 104.207.44.159:12583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boxfactorylofts.com"] [uri "/.git/HEAD"] [unique_id "aXDMNZYudZ0xIecuOtLiOgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-01-20 21:47:44 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇨🇦 ISPLtd	2026-01-05 16:31:32 (5 months ago)	Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config ... show more Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config or .env. show less	Hacking Web App Attack
Anonymous	2025-12-30 23:49:06 (5 months ago)	Forum/form spam	Web Spam
🇩🇪 David Ferneding	2025-12-30 13:11:54 (5 months ago)	Blocked by UFW (TCP on 80) Source port: 37553 TTL: 54 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 37553 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 104.207.44.159) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2025-12-27 03:41:00 (5 months ago)	attempts to hack passwords	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:52:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:52:08.536637 2025] [security2:error] [pid 28393:tid 28393] [client 104.207.44.159:26183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.zackfranz.com"] [uri "/.git/HEAD"] [unique_id "aSPyiHZeV400FTP4MIkJ6gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:56:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:56:33.478774 2025] [security2:error] [pid 3555:tid 3555] [client 104.207.44.159:32765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wiknwax.com"] [uri "/.env"] [unique_id "aSPlgX80ZzHzHnpYPdEnMgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:34:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:34:22.987011 2025] [security2:error] [pid 8297:tid 8297] [client 104.207.44.159:45389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mouserart.com"] [uri "/.svn/wc.db"] [unique_id "aSPgTqnIR1m3Kd2e09yEqQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-04 17:13:15 (7 months ago)		Web App Attack
🇳🇱 Mangelot Hosting	2025-11-01 18:13:12 (7 months ago)	(bad_user_agent) srv104 Bad User-Agent 104.207.44.159 (US/United States/-): 10 in the last 3600 secs ... show more (bad_user_agent) srv104 Bad User-Agent 104.207.44.159 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 applemooz	2025-11-01 11:22:44 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2025-10-06 23:43:50 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.21.246.238

🇺🇸 66.132.172.204

🇺🇸 185.191.171.7

🇮🇳 122.165.124.15

🇳🇱 45.148.10.152

🇨🇳 218.94.137.166

🇺🇸 192.3.218.12

🇧🇷 187.51.219.26

🇸🇪 178.73.232.97

🇨🇳 153.37.156.211

🇱🇹 81.30.98.44

🇺🇸 65.49.1.60

🇺🇸 43.162.99.8

🇬🇧 193.163.125.35

🇨🇳 125.124.226.217

🇨🇳 124.117.195.153

🇵🇰 103.173.7.171

🇺🇸 40.78.155.180

🇨🇳 36.33.167.165

🇺🇸 216.218.206.121