JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.20

104.207.41.20 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.20

Whois 104.207.41.20

IP Abuse Reports for 104.207.41.20:

This IP address has been reported a total of 99 times from 23 distinct sources. 104.207.41.20 was first reported on June 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-05 11:05:04 (1 month ago)	Banned by SPAMHAUS ASN-DROP list (ASN: 200373)	DDoS Attack Hacking Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-03-25 14:39:35 (2 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 ezsystems.com	2026-03-10 10:01:07 (2 months ago)		Web Spam
Anonymous	2026-03-05 06:31:07 (3 months ago)	Banned by SPAMHAUS ASN-DROP list (ASN: 200373)	DDoS Attack Hacking Bad Web Bot Web App Attack
🇪🇸 librebit	2026-02-18 00:26:18 (3 months ago)	Brute force	Brute-Force
Anonymous	2026-02-11 10:51:52 (3 months ago)	Banned by SPAMHAUS ASN-DROP list (ASN: 200373)	DDoS Attack Hacking Bad Web Bot Web App Attack
🇩🇪 F242	2026-01-30 05:34:36 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇦🇺 MAGIC	2026-01-13 02:12:53 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2025-12-23 23:50:38 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-08 14:35:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 09:35:24.052775 2025] [security2:error] [pid 23332:tid 23332] [client 104.207.41.20:37603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oqinile.com"] [uri "/.env"] [unique_id "aTbiLPg5IYYPV2eXMIsZSAAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 01:04:40 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:04:32.334797 2025] [security2:error] [pid 20098:tid 20098] [client 104.207.41.20:14771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drxcontent.com"] [uri "/.svn/wc.db"] [unique_id "aTYkIPbuCmLdDWh2GPuYGwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:45:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:45:47.351693 2025] [security2:error] [pid 30721:tid 30721] [client 104.207.41.20:20071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scothart.com"] [uri "/.git/HEAD"] [unique_id "aTK329NgVIU_FVY1GaBKMgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 07:18:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:18:07.805882 2025] [security2:error] [pid 27280:tid 27280] [client 104.207.41.20:32875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computersraleigh.com"] [uri "/.git/HEAD"] [unique_id "aTKHLyIb_g9Tn0Fs7Q180QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 06:15:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:15:49.305044 2025] [security2:error] [pid 27570:tid 27570] [client 104.207.41.20:47363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intolifeproductions.com"] [uri "/.git/HEAD"] [unique_id "aTJ4leUWReOEI4Lky4RGWAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:32:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:31:53.818165 2025] [security2:error] [pid 19260:tid 19260] [client 104.207.41.20:24719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cestcaryntravel.com"] [uri "/.git/HEAD"] [unique_id "aSVbaT4_JtTM08t74w8YUgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 93.103.76.180

🇩🇪 91.236.186.214

🇳🇱 91.235.136.15

🇬🇧 91.228.186.211

🇩🇪 91.217.149.182

🇺🇸 2602:80d:1008::4e

🇩🇪 176.65.132.17

🇺🇸 173.231.220.143

🇮🇩 103.67.80.61

🇩🇪 91.186.213.118

🇫🇮 91.149.254.154

🇫🇮 91.132.142.218

🇬🇧 91.109.114.211

🇫🇮 91.108.241.166

🇩🇪 91.107.178.192

🇷🇺 91.107.86.90

🇷🇺 90.188.35.221

🇲🇽 89.213.106.98

🇶🇦 89.211.136.212

🇳🇱 89.187.174.104