JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.2

104.207.41.2 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.2

Whois 104.207.41.2

IP Abuse Reports for 104.207.41.2:

This IP address has been reported a total of 81 times from 24 distinct sources. 104.207.41.2 was first reported on June 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FutureFm	2026-05-21 09:31:00 (2 weeks ago)	104.207.41.2 - - [21/May/2026:10:52:50 +0200] "GET /.env	Brute-Force Hacking
🇩🇪 big-cloud.nl	2026-05-11 23:35:22 (3 weeks ago)	Try to access /.env	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-03 10:07:02 (1 month ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-01 10:20:02 (1 month ago)	suspicious request in access.log	Web App Attack
🇩🇪 4server	2026-04-30 23:06:20 (1 month ago)	[FriMay0101:06:17.3659592026][security2:error][pid3581079:tid3581102][client104.207.41.2:0]ModSecuri ... show more [FriMay0101:06:17.3659592026][security2:error][pid3581079:tid3581102][client104.207.41.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"allegraravizza.it\"][uri\"/.aws/credentials\"][unique_id\"afPgadmQUzTi1XbmU2lWSQAAAFQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 directorioeducativo.com	2026-04-27 09:59:06 (1 month ago)	GET URL: "/.aws/credentials"Agent: "Mozilla/5.0 (Linux; Android 9; MIX 2S Build/PKQ1.180729.001; wv) ... show more GET URL: "/.aws/credentials"Agent: "Mozilla/5.0 (Linux; Android 9; MIX 2S Build/PKQ1.180729.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044807 Mobile Safari/537.36 MMWEBID/8952 MicroMessenger/7.0.6.1460(0x27000679) Process/tools NetType/4G Language/zh_CN" show less	Web App Attack
Anonymous	2026-04-19 05:49:50 (1 month ago)	[19/Apr/2026:08:49:49 +0300] 177657778920.797691 104.207.41.2 37931 148.251.76.218 443 [19/Apr/2026: ... show more [19/Apr/2026:08:49:49 +0300] 177657778920.797691 104.207.41.2 37931 148.251.76.218 443 [19/Apr/2026:08:49:50 +0300] 177657779057.964280 104.207.41.2 13813 148.251.76.218 443 show less	Web App Attack
🇺🇸 [email protected]	2025-11-02 00:03:54 (7 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-11-02T00:03:54Z	Brute-Force
Anonymous	2025-10-18 00:26:15 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-14 00:31:09 (7 months ago)	GlobalProtect login attempts with user keatingm.	VPN IP Brute-Force
Anonymous	2025-10-11 04:13:54 (7 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 20:14:08 (7 months ago)	Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 20:53:43 (7 months ago)	Attempted brute force login to web vpn 252 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 252 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 22:47:13 (7 months ago)	Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 23:40:55 (7 months ago)	Attempted brute force login to web vpn 38 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 38 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.218.168.25

🇨🇳 121.237.180.222

🇨🇳 117.72.98.89

🇮🇩 103.219.73.193

🇨🇳 218.201.39.70

🇺🇸 147.185.132.109

🇨🇳 120.48.7.234

🇨🇳 115.190.219.169

🇨🇿 109.238.43.227

🇫🇷 91.196.152.117

🇺🇸 37.140.223.50

🇺🇸 20.46.235.164

🇷🇴 2.57.121.112

🇬🇧 2a02:4780:a:2127:0:1ca4:5ab6:1

🇬🇧 2a00:1450:4009:c01::121

🇸🇬 212.73.148.21

🇩🇪 203.188.189.14

🇨🇳 182.240.200.142

🇧🇷 170.244.140.19

🇩🇪 167.94.145.23