JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.207.41.216

Activity Trending Down

Abuse confidence score ?

17% Caution

147 reports

23 reporters · latest 2 weeks ago

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.207.41.216

Export CSV

This IP address has been reported a total of 147 times from 23 distinct sources. 104.207.41.216 was first reported on June 8th 2024, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: Sweden with 2 reports; France with 1 report; Poland with 1 report. The most common categories in these recent reports were: Web App Attack 5 times; Hacking 2 times; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-28 22:58:26 (2 weeks ago)	[22:58] Attempted HTTPS GlobalProtect login with credentials damicoj:W******1	Web App Attack
🇵🇱 Jurigag	2026-09-21 14:40:53 (3 weeks ago)	Repeated failed authentication attempts against internal API endpoint on payments-service with inval ... show more Repeated failed authentication attempts against internal API endpoint on payments-service with invalid/empty Bearer token (automated scanning behavior, not normal client traffic). show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-03 00:10:51 (1 month ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2026-09-03 00:10:51 (1 month ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇫🇷 Sklurk	2026-08-17 01:15:50 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-04-19 02:48:41 (5 months ago)	IM360 WAF: Laravel .env file access	Web App Attack
🇪🇸 librebit	2026-03-30 06:56:58 (6 months ago)	Brute force	Brute-Force
🇩🇪 HandyTreff.de	2026-03-17 02:00:07 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -50.15 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -50.15 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 21:15:59 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:15:51.618777 2025] [security2:error] [pid 2136:tid 2136] [client 104.207.41.216:39969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbottombikinis.com"] [uri "/.svn/wc.db"] [unique_id "aS9XB33BA7ttRC3GWwa-VgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:46:19 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:46:15.710168 2025] [security2:error] [pid 6705:tid 6723] [client 104.207.41.216:59315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabegabel.com"] [uri "/.git/HEAD"] [unique_id "aS9CB2a12PfYyZQMHMW1jgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 16:43:48 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 11:43:41.280100 2025] [security2:error] [pid 21963:tid 21963] [client 104.207.41.216:40469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdhlgroup.com"] [uri "/.svn/wc.db"] [unique_id "aS8XPQ7oieh90EjTLS9sOAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 06:03:42 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:03:28.611129 2025] [security2:error] [pid 10376:tid 10376] [client 104.207.41.216:17249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahsigns.com"] [uri "/.svn/wc.db"] [unique_id "aS6BMKb_yiABqUW79mil9wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:12:33 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:12:25.728272 2025] [security2:error] [pid 32085:tid 32085] [client 104.207.41.216:23893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "simonharvey.com"] [uri "/.env"] [unique_id "aS51OSt8SF95go0zO2Yn5wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:57:05 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:56:57.056058 2025] [security2:error] [pid 3312490:tid 3312490] [client 104.207.41.216:31879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.theamarals.com"] [uri "/.env"] [unique_id "aSPlmXxI0sPn-DK0wv-UFAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2025-10-23 22:45:54 (11 months ago)	(sshd) Failed SSH login from 104.207.41.216 (US/United States/-)	Brute-Force SSH

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.171.192.1

🇺🇸 192.253.209.15

🇻🇳 183.91.11.36

🇨🇳 115.191.11.182

🇺🇸 107.175.132.47

🇸🇬 101.47.163.103

🇯🇵 8.216.6.107

🇺🇸 216.165.246.75

🇸🇬 139.59.124.168

🇰🇷 112.168.255.132

🇮🇳 103.174.34.49

🇧🇩 103.127.5.34

🇸🇮 102.220.160.173

🇺🇸 94.183.233.191

🇷🇺 83.219.20.100

🇳🇱 45.148.10.151

🇺🇸 45.146.55.10

🇩🇪 35.198.187.101

🇦🇺 209.38.87.194

🇵🇱 194.180.49.123