JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.200

104.207.41.200 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.200

Whois 104.207.41.200

IP Abuse Reports for 104.207.41.200:

This IP address has been reported a total of 154 times from 18 distinct sources. 104.207.41.200 was first reported on June 7th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oralunal	2026-07-03 06:32:59 (1 month ago)	IP banned by Fail2Ban in jail ah-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-05-23 01:33:33 (3 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-04-30 22:16:53 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.41.200 2026-04-30 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.41.200 2026-04-30 10:17:57 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-16 22:17:23 (4 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.41.200 2026-04-16 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.41.200 2026-04-16 07:01:49 /examples/servlets/servlet/SessionExample 2026-04-16 13:44:39 /docs/appdev/sample/web/WEB-INF/web.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-12 22:17:19 (4 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.41.200 2026-04-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.41.200 2026-04-12 17:42:30 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇵🇹 Information Security	2026-03-23 22:52:41 (5 months ago)	Web App Attack	Web App Attack
🇬🇧 CDN	2026-03-20 12:53:52 (5 months ago)	Path traversal: 'newsid'=>359\	SQL Injection
🇨🇳 ThreatBook.io	2026-03-12 22:17:00 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.41.20 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.41.200 2026-03-12 02:06:50 /druid/index.html show less	Web App Attack
Anonymous	2026-02-13 12:53:43 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 104.207.41.200 (US/United States/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-02-13 12:41:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:41:07.202394 2026] [security2:error] [pid 1826:tid 1826] [client 104.207.41.200:20111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microdot.net"] [uri "/.env.save"] [unique_id "aY8b46wfdqfEpLji8gW9MQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 09:08:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:08:45.736416 2026] [security2:error] [pid 7020:tid 7036] [client 104.207.41.200:37079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metrobaselexpoforum.org"] [uri "/wp/.git/config"] [unique_id "aY7qHfAxSgCXV6M-D16shwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:22:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:22:40.062692 2026] [security2:error] [pid 25633:tid 25633] [client 104.207.41.200:21021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcthorpe.com"] [uri "/test/.git/config"] [unique_id "aY7DMIq46SHfIELN3O3-FwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:25:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:25:09.925888 2026] [security2:error] [pid 1363634:tid 1363634] [client 104.207.41.200:59063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mattsound.com"] [uri "/frontend/.env"] [unique_id "aY61tSXauA0_o33bXT7UEwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:47:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:47:36.871709 2026] [security2:error] [pid 2568941:tid 2568941] [client 104.207.41.200:56075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markaandrews.com"] [uri "/frontend/.env"] [unique_id "aY6e2C4fY7fbUpHud6PJEwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇷 188.252.189.177

🇦🇷 186.13.112.150

🇬🇧 154.16.44.182

🇺🇸 146.190.134.221

🇨🇦 85.217.149.61

🇦🇷 45.229.84.22

🇨🇱 201.187.175.34

🇹🇼 198.235.24.115

🇺🇦 178.158.206.52

🇸🇬 172.253.211.26

🇨🇳 171.213.198.55

🇩🇪 167.94.146.53

🇺🇸 71.6.134.233

🇩🇪 69.5.169.238

🇵🇰 59.103.217.88

🇳🇱 45.148.10.151

🇨🇳 210.46.216.150

🇬🇧 195.206.182.206

🇨🇴 190.61.40.40

🇧🇷 179.51.186.73