AbuseIPDB » 104.244.75.74

104.244.75.74 was found in our database!

This IP was reported 672 times. Confidence of Abuse is 40%: ?

40%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	BuyVM
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Hostname(s)	this-is-a-tor-exit-node.h-o-s-t.name
Domain Name	frantech.ca
Country	Luxembourg
City	Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.244.75.74

Whois 104.244.75.74

IP Abuse Reports for 104.244.75.74:

This IP address has been reported a total of 672 times from 148 distinct sources. 104.244.75.74 was first reported on October 25th 2021, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-07-13 09:32:46 (1 day ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
TPI-Abuse	2025-07-02 12:37:56 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 02 08:37:52.033350 2025] [security2:error] [pid 23914:tid 23914] [client 104.244.75.74:55548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kirkrmartin.com"] [uri "/.git/config"] [unique_id "aGUoIE5u7QQWsk8rI14EmwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-01 03:07:36 (1 week ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
TPI-Abuse	2025-06-30 17:24:58 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 13:24:54.910654 2025] [security2:error] [pid 24917:tid 24917] [client 104.244.75.74:60104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.leeknight.com"] [uri "/.git/config"] [unique_id "aGLIZjfDuCgc_lf_YA8BsQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-30 12:11:42 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 08:11:36.033161 2025] [security2:error] [pid 8540:tid 8540] [client 104.244.75.74:49964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bluegrassexpressband.com"] [uri "/.git/config"] [unique_id "aGJ--FjzAHTT-LkrTILO5gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-30 04:33:13 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 00:33:10.147506 2025] [security2:error] [pid 32158:tid 32158] [client 104.244.75.74:50308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portraitartisans.vittariadesign.com"] [uri "/.git/config"] [unique_id "aGIThshLM3QFwoubdM9ErAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
el-brujo	2025-06-23 08:50:31 (3 weeks ago)	06/23/2025-10:38:43.712903 104.244.75.74 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 3	Hacking
TPI-Abuse	2025-06-23 02:33:05 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 22:33:01.350845 2025] [security2:error] [pid 3753476:tid 3753476] [client 104.244.75.74:47542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.convoyforkids.com"] [uri "/wp-config.php----"] [unique_id "aFi83ZxFagpMtwWr98ZwBwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
sefinek.net	2025-06-21 12:18:02 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Proto ... show moreTriggered Cloudflare WAF (firewallCustom) from T1. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /blocklist-generator UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-06-20 16:09:48 (3 weeks ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
TPI-Abuse	2025-06-19 13:24:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 19 09:24:27.328619 2025] [security2:error] [pid 4178229:tid 4178229] [client 104.244.75.74:37304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertautoworks.com"] [uri "/.git/config"] [unique_id "aFQPi3T3YqnZhpSlqR99ewAAAAE"], referer: https://www.desertautoworks.com/.git/config show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-17 23:49:29 (3 weeks ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
TPI-Abuse	2025-06-15 18:58:10 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t. ... show more(mod_security) mod_security (id:210492) triggered by 104.244.75.74 (this-is-a-tor-exit-node.h-o-s-t.name): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 14:58:02.316664 2025] [security2:error] [pid 134645:tid 134645] [client 104.244.75.74:43822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.reachpoint.com"] [uri "/.git/config"] [unique_id "aE8Xureg8TxTnzljThyyjwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
oncord	2025-06-15 00:14:22 (4 weeks ago)	Form spam	Web Spam
MAGIC	2025-06-10 04:01:25 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩