JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.115.241

104.168.115.241 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 100%: ?

100%

ISP	ColoCrossing
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	104-168-115-241-host.colocrossing.com
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.115.241

Whois 104.168.115.241

IP Abuse Reports for 104.168.115.241:

This IP address has been reported a total of 362 times from 174 distinct sources. 104.168.115.241 was first reported on May 8th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ambor	2026-06-23 15:59:01 (3 hours ago)	Honeypot triggered: /.git/config on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ... show more Honeypot triggered: /.git/config on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36. Method: GET show less	Web App Attack
🇫🇷 Baking333	2026-06-23 15:37:47 (4 hours ago)	[redacted] 104.168.115.241 - - [23/Jun/2026:16:37:45 +0100] "GET /.git/config HTTP/1.1" 302 6768 0/2 ... show more [redacted] 104.168.115.241 - - [23/Jun/2026:16:37:45 +0100] "GET /.git/config HTTP/1.1" 302 6768 0/201026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 104.168.115.241 - - [23/Jun/2026:16:37:45 +0100] "GET /.git/HEAD HTTP/1.1" 302 6768 0/178648 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-23 09:33:49 (10 hours ago)	[redacted] 104.168.115.241 - - [23/Jun/2026:10:33:47 +0100] "GET /.git/config HTTP/1.1" 302 6818 0/1 ... show more [redacted] 104.168.115.241 - - [23/Jun/2026:10:33:47 +0100] "GET /.git/config HTTP/1.1" 302 6818 0/105862 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 104.168.115.241 - - [23/Jun/2026:10:33:47 +0100] "GET /.git/HEAD HTTP/1.1" 302 6818 0/101343 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-23 09:21:14 (10 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇸🇪 Per-Erik Runebert	2026-06-23 08:39:27 (11 hours ago)	Excessive unauthorized requests	Hacking
🇩🇪 4server	2026-06-23 02:36:24 (17 hours ago)	[TueJun2304:36:20.5320342026][security2:error][pid2175487:tid2175547][client104.168.115.241:0]ModSec ... show more [TueJun2304:36:20.5320342026][security2:error][pid2175487:tid2175547][client104.168.115.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.scrspace.com\"][uri\"/.git/config\"][unique_id\"ajnxJCkt4QmyRXfqxvHolgAAAFQ\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-06-23 00:39:29 (19 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 sdos.es	2026-06-23 00:01:07 (19 hours ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
Anonymous	2026-06-22 10:30:40 (1 day ago)	[Firewall Canary] Temporary ban due to firewall rule match [URI:/.git/]	Bad Web Bot Web App Attack
🇺🇸 sandra361	2026-06-22 06:59:44 (1 day ago)	Port scan detected: 19 attempts across 2 ports (443,80). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=104.1 ... show more Port scan detected: 19 attempts across 2 ports (443,80). \| Evidence: GHOST_SCAN: IN=enp1s0 SRC=104.168.115.241 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=26772 DF PROTO=TCP SPT=33430 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇳🇱 MM-bot	2026-06-22 03:42:24 (1 day ago)	URL-probe: HTTP/1.1 GET request on /.git/config (2026-06-22 05:42:24 UTC+2)	Web App Attack Hacking
🇬🇧 consul.to	2026-06-22 01:54:50 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 18:39:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 104.168.115.241 (104-168-115-241-host.colocross ... show more (mod_security) mod_security (id:210492) triggered by 104.168.115.241 (104-168-115-241-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 14:39:29.554519 2026] [security2:error] [pid 28940:tid 28940] [client 104.168.115.241:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.upskirtcrazy.com"] [uri "/.git/HEAD"] [unique_id "ajgv4XQKuTuE6_MEaL_7bQAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-21 04:37:34 (2 days ago)	[redacted] 104.168.115.241 - - [21/Jun/2026:05:37:31 +0100] "GET /.git/HEAD HTTP/1.1" 302 5298 0/659 ... show more [redacted] 104.168.115.241 - - [21/Jun/2026:05:37:31 +0100] "GET /.git/HEAD HTTP/1.1" 302 5298 0/65920 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" [redacted] 104.168.115.241 - - [21/Jun/2026:05:37:31 +0100] "GET /.git/config HTTP/1.1" 302 5298 0/71960 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-20 19:09:59 (3 days ago)	[SatJun2021:09:54.9367142026][security2:error][pid3841204:tid3841224][client104.168.115.241:0]ModSec ... show more [SatJun2021:09:54.9367142026][security2:error][pid3841204:tid3841224][client104.168.115.241:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.worldgoldfundltd.com\"][uri\"/.git/config\"][unique_id\"ajblglI6YJmhdC0o50utFQAAAFE\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 362 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.116.247.145

🇺🇸 161.35.232.200

🇺🇸 156.232.13.218

🇮🇳 45.120.124.76

🇬🇭 41.139.0.127

🇬🇧 35.203.210.70

🇺🇸 20.118.24.61

🇯🇵 20.63.218.49

🇮🇳 122.187.173.10

🇺🇸 109.105.210.84

🇩🇪 84.170.14.18

🇫🇮 80.66.83.80

🇺🇸 34.169.212.188

🇫🇷 13.140.180.48

🇮🇹 185.197.8.203

🇮🇩 182.253.156.184

🇫🇮 147.185.133.137

🇺🇸 142.4.31.180

🇨🇳 113.214.18.234

🇷🇺 94.159.44.234