JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.41.4

104.207.41.4 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.41.4

Whois 104.207.41.4

IP Abuse Reports for 104.207.41.4:

This IP address has been reported a total of 114 times from 20 distinct sources. 104.207.41.4 was first reported on June 7th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-17 12:35:40 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-16 08:47:32 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-07 17:47:06 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Tilellit.PRO	2026-02-22 10:53:36 (4 months ago)	Fail2Ban banned 104.207.41.4 for security violations in jail wp-armour. Log: 2026/02/22 10:53:36 [er ... show more Fail2Ban banned 104.207.41.4 for security violations in jail wp-armour. Log: 2026/02/22 10:53:36 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.41.4 \| Target: wplogin" , client: 104.207.41.4, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-02-22 00:03:43 (4 months ago)	Fail2Ban banned 104.207.41.4 for security violations in jail wp-armour. Log: 2026/02/22 00:03:42 [er ... show more Fail2Ban banned 104.207.41.4 for security violations in jail wp-armour. Log: 2026/02/22 00:03:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.41.4 \| Target: wplogin" , client: 104.207.41.4, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇪🇸 10dencehispahard SL	2025-12-29 09:18:20 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇧🇷 hostseries	2025-12-24 06:43:15 (6 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇩🇪 iNetWorker	2025-12-21 12:56:49 (6 months ago)	trying to access non-authorized port	Port Scan
🇺🇸 TPI-Abuse	2025-11-24 09:25:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:25:03.387647 2025] [security2:error] [pid 3787688:tid 3787688] [client 104.207.41.4:37995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.radiantmessages.com"] [uri "/.env"] [unique_id "aSQkb26MJCD5d6FpN67WJQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:49:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:48:58.719105 2025] [security2:error] [pid 1109:tid 1109] [client 104.207.41.4:54001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bluegrassexpressband.com"] [uri "/.env"] [unique_id "aSP_2tCKnVeZsWIvQsXDbQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:30:39 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:30:23.645441 2025] [security2:error] [pid 31210:tid 31210] [client 104.207.41.4:22195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aaattanasio.com"] [uri "/.git/HEAD"] [unique_id "aSP7f703bKSVRfh12cfQFAAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:56:49 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.41.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:56:42.997857 2025] [security2:error] [pid 3965259:tid 3965339] [client 104.207.41.4:23937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myhoustonplasticsurgery.com.aafm.us"] [uri "/.git/HEAD"] [unique_id "aSPzmsHsvdKIeQe-cM9ULQAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-19 12:05:21 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.19 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-13 23:32:23 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-11 06:38:08 (8 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.11 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.11.11 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 49.7.150.100

🇭🇰 223.255.177.204

🇨🇭 193.5.236.170

🇵🇱 185.153.32.151

🇵🇹 185.138.89.72

🇷🇺 185.46.49.49

🇵🇱 176.53.159.198

🇺🇸 150.107.38.251

🇧🇷 102.211.152.138

🇸🇬 101.47.15.26

🇳🇱 45.156.128.101

🇧🇷 20.206.67.15

🇻🇳 14.191.224.186

🇺🇸 173.27.56.36

🇸🇬 167.99.64.39

🇺🇸 157.230.239.134

🇨🇳 115.49.211.101

🇱🇹 77.90.185.20

🇨🇳 47.116.63.16

🇮🇳 45.194.3.128