JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.45.244

104.207.45.244 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.45.244

Whois 104.207.45.244

IP Abuse Reports for 104.207.45.244:

This IP address has been reported a total of 131 times from 19 distinct sources. 104.207.45.244 was first reported on June 4th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-20 11:55:01 (3 weeks ago)	suspicious request in access.log	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-04 21:59:56 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-04	Web App Attack SSH Hacking
Anonymous	2026-05-03 12:13:08 (1 month ago)	Sensitive file access attempt	Hacking
🇺🇸 TPI-Abuse	2026-04-28 18:58:42 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 14:58:38.621177 2026] [security2:error] [pid 309:tid 309] [client 104.207.45.244:16133] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|linzylyne.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "linzylyne.com"] [uri "/s3cmd.ini"] [unique_id "afEDXsWKr40h05GH92Z-BQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-03-21 02:58:13 (2 months ago)	Forum/form spam	Web Spam
Anonymous	2025-11-29 05:32:45 (6 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.29 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 04:53:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:53:21.990423 2025] [security2:error] [pid 25646:tid 25646] [client 104.207.45.244:37629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.edelbaumarchitect.com"] [uri "/.env"] [unique_id "aSU2QZ9xIw2hnWE5VottcgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:02:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:02:29.945659 2025] [security2:error] [pid 22338:tid 22338] [client 104.207.45.244:44765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jbaycabs.com"] [uri "/.env"] [unique_id "aSUqVdWPREABe9H4GpXr_gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:31:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:30:54.372253 2025] [security2:error] [pid 20331:tid 20331] [client 104.207.45.244:58519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.socialenterprise.net"] [uri "/.env"] [unique_id "aSUU3olQwSdQmdHeyN5Z9AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:19:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:19:52.675102 2025] [security2:error] [pid 3602:tid 3602] [client 104.207.45.244:42581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.carterindustries.net"] [uri "/.git/HEAD"] [unique_id "aSUEOAGvzpj-9YNW8F8zugAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:06:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:05:47.649105 2025] [security2:error] [pid 24296:tid 24296] [client 104.207.45.244:54035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hien.sonnyvo.com"] [uri "/.svn/wc.db"] [unique_id "aSTy21UruoOElvb8BmvmsAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2025-11-24 23:43:20 (6 months ago)	2025-11-25 @ 00:43:19 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇺🇸 nowyouknow	2025-11-20 15:40:08 (6 months ago)	(From [email protected]) Hello, Greetings from United Electrical Contractors. ... show more (From [email protected]) Hello, Greetings from United Electrical Contractors. After reviewing your services, we are interested in sourcing materials/services from your organization for an upcoming project. I am reaching out to inquire about your company’s current capacity, as we have a project scheduled to begin soon. Could you please provide a quotation for your services so we can proceed with our planning? Additionally, please review the attached document and let us know if you have any questions or if there are any updates regarding feasibility or capabilities. We are prepared to move forward once we receive your feedback. Regards, Mckee Sean show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-19 07:44:34 (6 months ago)	(From [email protected]) Hello, Greetings from United Electrical Contractors. ... show more (From [email protected]) Hello, Greetings from United Electrical Contractors. After reviewing your services, we are interested in sourcing materials/services from your organization for an upcoming project. I am reaching out to inquire about your company’s current capacity, as we have a project scheduled to begin soon. Could you please provide a quotation for your services so we can proceed with our planning? Additionally, please review the attached document and let us know if you have any questions or if there are any updates regarding feasibility or capabilities. We are prepared to move forward once we receive your feedback. Regards, Mckee Sean show less	Phishing Web Spam

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 217.216.73.244

🇧🇪 198.235.24.186

🇳🇿 64.105.88.106

🇳🇱 45.148.10.240

🇺🇸 200.10.43.2

🇨🇳 182.204.179.191

🇳🇱 176.65.139.250

🇨🇳 175.175.94.3

🇻🇳 171.251.236.54

🇺🇸 168.245.11.229

🇺🇸 162.216.149.3

🇸🇬 159.223.50.237

🇳🇱 88.151.32.194

🇺🇸 52.123.186.197

🇺🇸 40.126.62.131

🇨🇦 20.116.34.103

🇨🇳 221.224.194.3

🇳🇱 204.76.203.51

🇬🇧 193.163.125.155

🇭🇰 172.253.6.17