JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.44.198

104.207.44.198 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.44.198

Whois 104.207.44.198

IP Abuse Reports for 104.207.44.198:

This IP address has been reported a total of 138 times from 15 distinct sources. 104.207.44.198 was first reported on June 8th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-09 19:48:45 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:48:41.975477 2026] [security2:error] [pid 621161:tid 621192] [client 104.207.44.198:36675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gafmboard.com"] [uri "/api/.git/config"] [unique_id "aYo6GanHn1F_8LZLsZs0AwAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 18:48:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:48:51.411253 2026] [security2:error] [pid 901822:tid 901822] [client 104.207.44.198:33399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxbgsanta.com"] [uri "/test/.git/config"] [unique_id "aYosE5c_6GE73X-qQ6MHHwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:18:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:18:29.516022 2026] [security2:error] [pid 4357:tid 4357] [client 104.207.44.198:22893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullyevil.com"] [uri "/site/.git/config"] [unique_id "aYoW5U6DB_YvN92O2wB3_AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-02-09 09:47:26 (4 months ago)	GET /.aws/credentials HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 08:35:33 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 03:35:29.449708 2026] [security2:error] [pid 9747:tid 9747] [client 104.207.44.198:42387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fynyx.com"] [uri "/.env.production"] [unique_id "aYmcUfOyfnWq18DQQyiUDgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fbarela	2025-12-31 12:00:03 (5 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 BSG Webmaster	2025-11-24 08:35:08 (6 months ago)	Port scanning (Port 80)	Port Scan Hacking
🇺🇸 TPI-Abuse	2025-11-24 07:13:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:12:58.469522 2025] [security2:error] [pid 12929:tid 12929] [client 104.207.44.198:19647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobile.larkinplumbingservice.com"] [uri "/.git/HEAD"] [unique_id "aSQFemLvN9bvMkMF14kw0AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:02:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:02:00.241918 2025] [security2:error] [pid 29939:tid 29939] [client 104.207.44.198:56583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.derekvantreese.com"] [uri "/.svn/wc.db"] [unique_id "aSPYuMC2USmWmPSBSwYnpgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:44:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:44:38.430250 2025] [security2:error] [pid 8053:tid 8053] [client 104.207.44.198:47915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.barabesi.net"] [uri "/.git/HEAD"] [unique_id "aSPUpvNTYptQRu4o_rMO3gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 22:36:47 (7 months ago)	Attempted brute force login to web vpn 13 time(s); last attempt for 2025.11.17 is noted in report ti ... show more Attempted brute force login to web vpn 13 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-12 07:33:45 (7 months ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.11.12 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 17:02:41 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-11 04:49:43 (8 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 172.71.178.46

🇬🇧 172.70.86.158

🇺🇸 44.1.96.3

🇸🇦 37.104.192.41

🇧🇷 179.157.235.111

🇫🇮 178.20.210.152

🇬🇧 172.70.86.232

🇬🇧 172.69.43.254

🇯🇵 126.153.118.202

🇮🇳 103.134.46.236

🇺🇸 73.36.177.174

🇧🇪 44.11.239.201

🇬🇧 35.203.210.38

🇰🇿 178.88.72.158

🇭🇰 146.70.113.105

🇩🇪 139.59.208.225

🇮🇳 103.136.95.243

🇻🇳 103.60.242.169

🇮🇳 103.25.47.94

🇳🇱 89.39.105.78