JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.44.222

104.207.44.222 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.44.222

Whois 104.207.44.222

IP Abuse Reports for 104.207.44.222:

This IP address has been reported a total of 140 times from 21 distinct sources. 104.207.44.222 was first reported on June 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-05 18:52:03 (1 week ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 03:46:41 (1 week ago)	[Jul 5 05:46:40] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:600@154 ... show more [Jul 5 05:46:40] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.44.222:11318' (callid: 33ab98742efbf782bb6c999650c28ce3) - No matching endpoint found [Jul 5 05:46:40] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.44.222:11318' (callid: 33ab98742efbf782bb6c999650c28ce3) - No matching endpoint found ... show less	Brute-Force Port Scan
🇮🇹 Francesco Ippoliti	2026-07-03 23:09:03 (1 week ago)	[Jul 4 01:09:02] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:999@154 ... show more [Jul 4 01:09:02] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.44.222:10870' (callid: 3a0859cb2b658163d24c9bb83919af42) - No matching endpoint found [Jul 4 01:09:03] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.44.222:10870' (callid: 3a0859cb2b658163d24c9bb83919af42) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 20:22:10 (1 week ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇦🇺 MAGIC	2026-03-01 00:41:56 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇬🇧 relianoid.com	2026-02-21 15:55:53 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇩🇪 iNetWorker	2026-01-13 07:53:35 (6 months ago)	trolling for resource vulnerabilities	Web App Attack
Anonymous	2025-12-22 17:32:46 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:39:46 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:39:40.906223 2025] [security2:error] [pid 32395:tid 32395] [client 104.207.44.222:48255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bjennehall.thehallway.net"] [uri "/.env"] [unique_id "aSQn3OcEjHparq0Rdk4_GQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:32:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:32:09.957328 2025] [security2:error] [pid 13942:tid 14025] [client 104.207.44.222:20335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plastic-surgeon-texas.com.aafm.us"] [uri "/.env"] [unique_id "aSQJ-Q9TCbHXOd9uq_ezRgAAAc4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:12:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:12:50.267041 2025] [security2:error] [pid 20804:tid 20804] [client 104.207.44.222:19975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.niximperial.com"] [uri "/.svn/wc.db"] [unique_id "aSPpUjT8NDeTRb7LtIBiMgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:48:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.44.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:48:13.582159 2025] [security2:error] [pid 29249:tid 29249] [client 104.207.44.222:28027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ilovecoffeegroup.com"] [uri "/.svn/wc.db"] [unique_id "aSPjjVSM1jn869Phh4sxCAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 05:21:04 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇦🇺 AWW-Admin	2025-10-29 12:28:06 (8 months ago)	(wordpress) Failed wordpress login from 104.207.44.222 (US/United States/-)	Brute-Force
🇧🇷 hostseries	2025-10-25 06:21:26 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 199.241.120.131

🇹🇭 150.95.82.21

🇻🇳 103.95.159.50

🇺🇸 65.49.1.74

🇹🇷 5.181.87.33

🇺🇸 208.20.74.32

🇧🇷 177.23.89.240

🇮🇶 37.77.55.232

🇬🇧 35.203.210.50

🇺🇸 216.24.212.212

🇩🇪 167.94.146.36

🇷🇴 92.118.39.171

🇺🇸 74.125.80.28

🇦🇺 58.107.244.37

🇮🇳 49.36.35.106

🇭🇰 199.45.154.183

🇸🇦 188.48.109.96

🇺🇸 162.217.100.201

🇵🇭 112.198.207.46

🇫🇷 85.217.140.26