JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.44.162

104.207.44.162 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.44.162

Whois 104.207.44.162

IP Abuse Reports for 104.207.44.162:

This IP address has been reported a total of 150 times from 22 distinct sources. 104.207.44.162 was first reported on June 28th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-22 13:26:00 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-13 01:20:02 (3 weeks ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.44.16 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.44.162 2026-05-12 12:10:58 /v3/api-docs 2026-05-12 12:10:55 /prod-api/v2/api-docs 2026-05-12 12:10:56 /swagger/v1/swagger.json 2026-05-12 12:10:57 /api/swagger.json 2026-05-12 12:10:55 /v2/api-docs 2026-05-12 12:10:57 /swagger/docs/v1 show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-15 00:08:13 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.44.162 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.44.162 2026-04-14 07:17:48 /video/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-06 01:23:46 (3 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.44.162 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.44.162 2026-03-05 13:22:50 / show less	Web App Attack
🇮🇹 VHosting	2026-02-18 22:16:54 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇦🇺 oncord	2026-02-03 12:53:06 (4 months ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2026-01-19 02:38:23 (4 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.44.162 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.44.162 2026-01-18 04:50:43 /v2/api-docs 2026-01-18 04:50:43 /swagger/v1/swagger.json 2026-01-18 04:50:44 /swagger/docs/v1 2026-01-18 04:50:42 /prod-api/v2/api-docs 2026-01-18 04:50:44 /api/swagger.json 2026-01-18 04:50:45 /v3/api-docs show less	Web App Attack
🇪🇸 librebit	2026-01-14 04:57:09 (4 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-01-13 12:36:17 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:36:10.832423 2026] [security2:error] [pid 5157:tid 5157] [client 104.207.44.162:49433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omnithermal.com"] [uri "/.git/HEAD"] [unique_id "aWY8OvCrS1e2NiTnSozTGAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-01-06 08:30:01 (5 months ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2025-12-27 00:37:47 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.44.162 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.44.162 2025-12-26 12:01:59 /prod-api/v2/api-docs 2025-12-26 12:02:01 /api/swagger.json 2025-12-26 12:02:01 /v3/api-docs 2025-12-26 12:02:00 /swagger/docs/v1 2025-12-26 12:02:00 /swagger/v1/swagger.json 2025-12-26 12:01:59 /v2/api-docs show less	Web App Attack
Anonymous	2025-12-22 18:42:20 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 fbarela	2025-11-19 07:00:49 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-11-10 16:58:01 (6 months ago)	wordpress-trap	Web App Attack
🇦🇺 oncord	2025-11-09 00:13:05 (6 months ago)	Form spam	Web Spam

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 18.189.6.250

🇺🇸 2602:80d:1007::7c

🇬🇧 195.96.139.227

🇳🇱 194.50.16.73

🇮🇹 172.253.13.146

🇺🇸 172.237.156.201

🇺🇸 172.233.176.61

🇺🇸 161.35.61.64

🇱🇹 81.30.98.62

🇳🇱 45.148.10.157

🇭🇰 40.83.92.30

🇷🇴 2.57.121.112

🇺🇸 2602:80d:1008::86

🇨🇦 192.40.185.58

🇺🇸 173.244.60.241

🇳🇿 121.73.163.145

🇳🇱 95.85.226.199

🇱🇹 81.30.98.225

🇧🇷 45.177.210.193

🇰🇷 222.108.100.117