JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.45.208

104.207.45.208 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.45.208

Whois 104.207.45.208

IP Abuse Reports for 104.207.45.208:

This IP address has been reported a total of 134 times from 14 distinct sources. 104.207.45.208 was first reported on June 3rd 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-01-14 08:33:36 (5 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
🇦🇺 MAGIC	2025-12-19 00:04:54 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 08:37:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:37:33.823861 2025] [security2:error] [pid 22132:tid 22132] [client 104.207.45.208:37305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gamedayincentives.com"] [uri "/.env"] [unique_id "aSa8TQJ2yL18k5IsJREHVQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:28:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:28:40.962140 2025] [security2:error] [pid 19198:tid 19198] [client 104.207.45.208:22741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surfing.infojeffreysbay.com"] [uri "/.svn/wc.db"] [unique_id "aSaQCHW7kWrcCYzidpZ9qgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:28:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:28:54.833125 2025] [security2:error] [pid 18937:tid 18937] [client 104.207.45.208:12845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.offbeatcompassion.com"] [uri "/.env"] [unique_id "aSZJxkQvoWYn-AfYCHiVVAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:01:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:01:20.861452 2025] [security2:error] [pid 582:tid 582] [client 104.207.45.208:51773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.buffaloweddingreception.com"] [uri "/.git/HEAD"] [unique_id "aSUN8OzcVgQGR8zcIi3GzAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:23:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:23:07.685037 2025] [security2:error] [pid 21298:tid 21298] [client 104.207.45.208:49399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.zmgmt.com"] [uri "/.git/HEAD"] [unique_id "aST263zyTxe1L8UpE_hA2AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:32:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:32:36.204891 2025] [security2:error] [pid 2967:tid 2967] [client 104.207.45.208:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.infinitewashing.com"] [uri "/.env"] [unique_id "aSQKFAJwgcRBCkXYX6duyQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:37:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:37:14.520475 2025] [security2:error] [pid 3997:tid 3997] [client 104.207.45.208:46363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photos.jpwatters.net"] [uri "/.env"] [unique_id "aSPvClXt-iggqPFQ4wVwogAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 13:04:53 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-18 01:58:30 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-11 05:18:27 (8 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 23:22:36 (8 months ago)	Attempted brute force login to web vpn 234 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 234 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 23:16:47 (8 months ago)	Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
🇦🇹 urnilxfgbez	2025-10-08 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.232.116.235

🇺🇸 134.199.219.52

🇸🇬 47.84.134.255

🇳🇱 45.148.10.121

🇬🇧 213.166.84.55

🇬🇧 195.206.182.220

🇦🇷 170.155.12.4

🇺🇸 154.197.57.219

🇪🇸 149.91.97.132

🇸🇪 85.195.9.20

🇦🇹 31.14.17.101

🇺🇸 146.103.5.94

🇨🇳 111.26.6.111

🇻🇳 103.98.161.5

🇦🇺 81.21.233.106

🇺🇸 74.82.47.37

🇨🇦 54.39.89.167

🇷🇺 45.91.64.6

🇺🇸 23.229.126.0

🇺🇸 205.210.31.70