JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.124

104.207.41.124 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.124

Whois 104.207.41.124

IP Abuse Reports for 104.207.41.124:

This IP address has been reported a total of 127 times from 16 distinct sources. 104.207.41.124 was first reported on June 4th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-29 14:00:24 (6 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-00.104.207.41.124.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-00.104.207.41.124.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-18 06:46:22 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-46.104.207.41.124.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-46.104.207.41.124.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-04-11 15:01:38 (1 month ago)	Forum/form spam	Web Spam
Anonymous	2026-02-20 12:06:15 (3 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-02-03 20:34:26 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-01-30 06:01:11 (4 months ago)	Forum/form spam	Web Spam
🇪🇸 robotstxt	2026-01-23 19:18:40 (4 months ago)	104.207.41.124 - - [23/Jan/2026:19:16:41 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 11 "http ... show more 104.207.41.124 - - [23/Jan/2026:19:16:41 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 11 "https://economipedia.com/definiciones/provision.html" rt="0.343" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-admin/admin-ajax.php" u="/wp-admin/admin-ajax.php" ucs="-" ua="unix:/var/run/php/economipedia83.sock" us="400" uct="0.000" urt="0.344" 104.207.41.124 - - [23/Jan/2026:19:16:43 +0000] "GET /wp-admin/admin-ajax.php?action=register HTTP/1.1" 400 11 "https://economipedia.com/wp-admin/admin-ajax.php" rt="0.335" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-admin/admin-ajax.php?action=register" u="/wp-admin/admin-ajax.php" ucs="-" ua="unix:/var/run/php/economipedia83.sock" us="400" uct="0.000" urt="0.335" 104.207.41.124 - - [23/Jan/2026:19:16:41 +00 ... show less	Web Spam Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:47 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 02:07:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:07:08.387863 2025] [security2:error] [pid 654888:tid 654888] [client 104.207.41.124:48973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "croixlac.com"] [uri "/.git/HEAD"] [unique_id "aSUPTDA0uf_QNa0fkZN24AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 23:18:18 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇯🇵 ki3	2025-11-02 04:16:57 (7 months ago)	Fail2Ban: Web App Attacks and Forum Spam 104.207.41.124 1762057016.0(JST)	Web Spam Bad Web Bot Web App Attack
🇵🇱 nfsec.pl	2025-10-17 08:53:50 (7 months ago)	2025-10-17T10:53:47.571210+02:00 stardust sshd[298860]: pam_unix(sshd:auth): authentication failure; ... show more 2025-10-17T10:53:47.571210+02:00 stardust sshd[298860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.41.124 2025-10-17T10:53:49.655842+02:00 stardust sshd[298860]: Failed password for invalid user [email protected] from 104.207.41.124 port 54619 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-10-14 14:13:25 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.14 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.14 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-14 09:31:37 (7 months ago)	GlobalProtect login attempts with user gdurante.	VPN IP Brute-Force
🇺🇸 TPI-Abuse	2025-10-10 12:36:51 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.41.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.41.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 08:36:45.949880 2025] [security2:error] [pid 18208:tid 18238] [client 104.207.41.124:34057] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|onernet.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onernet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOj93XHovKVQQcqQMRh7tAAAAVc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.184.143

🇧🇷 170.81.237.193

🇮🇩 103.122.67.223

🇵🇰 39.47.16.58

🇩🇪 213.209.159.56

🇷🇺 188.113.168.133

🇷🇺 178.213.115.162

🇮🇳 122.187.147.13

🇺🇸 107.150.103.155

🇺🇸 64.62.156.66

🇧🇷 45.140.193.156

🇲🇾 2001:e68:541a:185b:1463:54f3:3b6d:2dbb

🇨🇴 190.5.200.98

🇧🇷 179.191.82.115

🇷🇺 178.207.10.91

🇵🇱 143.20.97.115

🇵🇭 120.28.109.188

🇰🇷 112.217.188.122

🇫🇷 85.217.140.31

🇷🇴 80.94.92.186