JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.45.144

104.207.45.144 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.45.144

Whois 104.207.45.144

IP Abuse Reports for 104.207.45.144:

This IP address has been reported a total of 135 times from 20 distinct sources. 104.207.45.144 was first reported on June 8th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 HJ5Ss4Ju	2026-05-28 12:10:43 (3 weeks ago)	Blocked by Wordfence (SID 6)	Web App Attack
🇺🇸 lostswordfish.com	2026-05-23 09:42:04 (4 weeks ago)	Wordfence waf block on secure	Web App Attack
🇺🇸 nowyouknow	2026-04-16 12:26:13 (2 months ago)	(From [email protected]) Hi Van Zeilen Family Chiropractic & Wellness Center, I’ve buil ... show more (From [email protected]) Hi Van Zeilen Family Chiropractic & Wellness Center, I’ve built and trained an AI employee specifically for Van Zeilen Family Chiropractic & Wellness Center. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/ff-trained-agent or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/ff-trained-agent Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 myagent.site	2026-01-13 11:55:51 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇨🇦 SSH-Admin	2025-11-30 12:41:58 (6 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 nowyouknow	2025-11-24 23:10:17 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, countles ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-24 09:33:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:33:23.697865 2025] [security2:error] [pid 11057:tid 11057] [client 104.207.45.144:52075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.npeme.com"] [uri "/.svn/wc.db"] [unique_id "aSQmYyoPQFivjDvR92qE1AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:58:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:58:33.947395 2025] [security2:error] [pid 3261975:tid 3261975] [client 104.207.45.144:29883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3rdid7thinf.org"] [uri "/.git/HEAD"] [unique_id "aSPX6WbWqLigItgtPR0OWAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 13:03:37 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 09:00:15 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 04:00:03.150908 2025] [security2:error] [pid 8658:tid 8658] [client 104.207.45.144:39889] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.darrow.biz\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.darrow.biz"] [uri "/s3cmd.ini"] [unique_id "aRbvk16G31PbDJJpCtxYJQAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 22:44:58 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.45.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 17:44:51.293714 2025] [security2:error] [pid 14498:tid 14498] [client 104.207.45.144:47349] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.limosnapa.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.limosnapa.com"] [uri "/s3cmd.ini"] [unique_id "aRZfYx8tK9prnozpIeCy3AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-04 16:56:14 (7 months ago)		Web App Attack
Anonymous	2025-11-01 21:24:34 (7 months ago)	[redacted] 104.207.45.144 - - [01/Nov/2025:22:24:20 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" " ... show more [redacted] 104.207.45.144 - - [01/Nov/2025:22:24:20 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" [redacted] 104.207.45.144 - - [01/Nov/2025:22:24:21 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0" [redacted] 104.207.45.144 - - [01/Nov/2025:22:24:22 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" [redacted] 104.207.45.144 - - [01/Nov/2025:22:24:23 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:30.0) Gecko/20100101 Firefox/30.0" [redacted] 104.207.45.144 - - [01/Nov/2025:22:24:25 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/4.0 (compatible; MSIE 5.23; Mac_PowerPC)" joerg-sh ... show less	Hacking Web App Attack
🇺🇸 nowyouknow	2025-10-31 08:02:58 (7 months ago)	(From [email protected]) Increase superchiros.com SEO standings, improve your search appear ... show more (From [email protected]) Increase superchiros.com SEO standings, improve your search appearance and grow powerful backlinks! BonusBacklinks.com - we deliver daily backlinks and bring website visits to your page EVERY DAY: + Take 85% SALE + Strong daily seo backlinks + Real web traffic + Prices cheap as $1 + Bonus coupon codes http://tiny.cc/bonusbacklinks-85discount BonusBacklinks.com - daily seo backlinks and website traffic to skyrocket your site everyday show less	Phishing Web Spam

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 190.34.19.177

🇫🇷 85.217.140.45

🇸🇬 85.203.21.160

🇮🇳 66.116.207.93

🇺🇸 66.94.116.236

🇧🇷 45.224.168.45

🇳🇱 45.156.87.119

🇺🇸 45.79.207.110

🇺🇸 44.246.128.117

🇺🇸 2600:1f18:3120:f503:ff1b:8a64:709a:23b5

🇹🇼 218.167.25.45

🇪🇸 213.194.155.210

🇨🇳 202.111.183.254

🇹🇼 198.235.24.26

🇺🇸 198.23.158.93

🇳🇱 176.65.139.236

🇨🇳 120.221.100.49

🇸🇬 85.203.21.156

🇩🇪 62.133.60.87

🇺🇸 44.30.142.3