JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.39

104.207.41.39 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 42%: ?

42%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.39

Whois 104.207.41.39

IP Abuse Reports for 104.207.41.39:

This IP address has been reported a total of 140 times from 23 distinct sources. 104.207.41.39 was first reported on June 6th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-06-03 15:17:31 (2 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2026-06-02 10:13:16 (3 days ago)	[da.kdns.gr] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide ... show more [da.kdns.gr] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide=true \| distinct_ips=20 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-05-31 07:50:38 (5 days ago)	(y4) Failed scan -byebye- from 104.207.41.39 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 tilellit.pro	2026-05-30 03:39:54 (6 days ago)	Fail2Ban banned 104.207.41.39 for security violations in jail wp-armour. Log: 2026/05/30 03:39:54 [e ... show more Fail2Ban banned 104.207.41.39 for security violations in jail wp-armour. Log: 2026/05/30 03:39:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.41.39 \| Target: wplogin" , client: 104.207.41.39, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2026-05-28 06:58:30 (1 week ago)	Web attack blocked by Wordfence on mergel.nu (1 hit). Reported by CRMON.	Web App Attack
🇲🇽 octageeks.com	2026-05-24 04:09:59 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 lostswordfish.com	2026-05-23 09:42:04 (1 week ago)	Wordfence waf block on secure	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:11 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-24 07:32:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:32:09.026860 2025] [security2:error] [pid 30189:tid 30189] [client 104.207.41.39:26317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asurprisinglittletown.com"] [uri "/.svn/wc.db"] [unique_id "aSQJ-b3EvJf1SPJanZX0OwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:33:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:33:41.364155 2025] [security2:error] [pid 32064:tid 32064] [client 104.207.41.39:60261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.butlerinc.net"] [uri "/.env"] [unique_id "aSPgJVgoZKB4MwsIe8NVmwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 12:56:22 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-11 08:23:19 (6 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.11 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-10 08:04:04 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.10 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 12:42:04 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-15 15:04:58 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.156.126.1

🇭🇰 218.102.122.116

🇯🇵 207.56.225.202

🇧🇷 201.17.133.138

🇧🇪 198.235.24.183

🇩🇪 195.230.103.250

🇳🇱 192.42.116.98

🇫🇮 185.101.21.237

🇧🇷 162.241.61.240

🇹🇬 156.38.73.89

🇵🇰 110.37.12.8

🇺🇸 104.238.54.160

🇷🇴 92.118.39.236

🇷🇴 92.118.39.62

🇬🇧 89.34.96.86

🇳🇱 87.245.211.37

🇳🇱 64.89.162.56

🇰🇷 59.21.37.60

🇩🇪 49.13.222.98

🇨🇴 45.176.232.230