JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.1

104.207.41.1 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.1

Whois 104.207.41.1

IP Abuse Reports for 104.207.41.1:

This IP address has been reported a total of 77 times from 14 distinct sources. 104.207.41.1 was first reported on June 4th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-02-18 13:28:24 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-01-29 03:28:21 (4 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-01-17 02:11:04 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 21:11:01.017507 2026] [security2:error] [pid 4927:tid 4927] [client 104.207.41.1:31665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.1826palmetto.com"] [uri "/.env"] [unique_id "aWrvtROixgRUyFIJm2RolQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 cloudmax	2025-12-31 00:56:52 (5 months ago)	Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, o ... show more Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-24 09:41:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:41:21.367235 2025] [security2:error] [pid 14633:tid 14633] [client 104.207.41.1:15561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tiesidebikinis.com"] [uri "/.env"] [unique_id "aSQoQT0UrB9_efmTFaX-_wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:02:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:02:20.763317 2025] [security2:error] [pid 13943:tid 14044] [client 104.207.41.1:34199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.plasticsurgeryjournal.aafm.us"] [uri "/.env"] [unique_id "aSQC_Opgfj-qx9CvqmRmEwAAAg8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:29:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:04.180325 2025] [security2:error] [pid 20122:tid 20122] [client 104.207.41.1:46051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jeanniemorrislaw.com"] [uri "/.env"] [unique_id "aSP7MCxjVX7dflIXr7QfsAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:55:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:55:17.208836 2025] [security2:error] [pid 20192:tid 20192] [client 104.207.41.1:58177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jeffhenry.net"] [uri "/.git/HEAD"] [unique_id "aSPzRZTlwS5K_ZE8sSkMVwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 23:36:15 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.17 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2025-11-12 17:25:59 (7 months ago)	(From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models ... show more (From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models with All Versions + All Upcoming Future Versions… Without Spending A Penny … https://bravo-333.site/MultiverseAI to UNSUBSCRIBE: https://bravo-333.site/unsubscribe?domain=goldsteinchiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
Anonymous	2025-11-12 16:35:15 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.12 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-09 05:30:10 (7 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.09 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-29 07:32:14 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇷🇴 clauss	2025-10-24 21:27:52 (7 months ago)	IP reached maximum auth failures for a one day block	Brute-Force
Anonymous	2025-10-14 00:32:46 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.14 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.14 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.105.98.252

🇭🇰 199.45.154.176

🇲🇽 187.190.35.163

🇻🇳 152.32.163.183

🇭🇰 118.193.38.134

🇻🇳 116.99.172.90

🇨🇳 112.94.252.237

🇺🇸 91.230.168.139

🇨🇦 85.217.149.72

🇺🇸 66.132.172.213

🇺🇸 52.0.21.53

🇳🇱 45.198.224.114

🇺🇸 34.186.15.23

🇨🇦 20.116.34.103

🇦🇪 5.193.219.214

🇫🇮 204.168.189.153

🇳🇱 195.178.110.2

🇨🇱 190.114.41.215

🇲🇽 187.191.48.6

🇮🇳 182.79.52.6