JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.62.41

104.207.62.41 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.62.41

Whois 104.207.62.41

IP Abuse Reports for 104.207.62.41:

This IP address has been reported a total of 124 times from 16 distinct sources. 104.207.62.41 was first reported on June 11th 2024, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-23 05:40:18 (11 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-16 00:51:25 (1 week ago)	Web App Attack	Web App Attack
🇵🇱 dcnet	2026-03-08 00:00:00 (3 months ago)	SSL VPN brute force credential stuffing on FortiGate 100F - 4 failed login attempts (unknown users) ... show more SSL VPN brute force credential stuffing on FortiGate 100F - 4 failed login attempts (unknown users) over 7 days (2026-03-01 to 2026-03-08) show less	Hacking Brute-Force
🇫🇷 Octopuce	2026-02-26 03:18:08 (3 months ago)	Aggressive web search of vulnerable pages: /spip.php?page=8027&id_article=8 /spip.php?page=article%2 ... show more Aggressive web search of vulnerable pages: /spip.php?page=8027&id_article=8 /spip.php?page=article%27%29%20AND%207590%3D9004%20AND%20%28%27gyHC ... show less	Web App Attack
🇩🇪 F242	2026-01-30 05:40:32 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇮🇹 VHosting	2025-12-23 20:40:07 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-26 10:18:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:18:06.385287 2025] [security2:error] [pid 18196:tid 18196] [client 104.207.62.41:55405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.marjorierosenberg.com"] [uri "/.svn/wc.db"] [unique_id "aSbT3qcVKBk3LKWxP71B0QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:13:03 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:12:59.354368 2025] [security2:error] [pid 3538473:tid 3538598] [client 104.207.62.41:48947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cert.aafm.us"] [uri "/.env"] [unique_id "aSaaa4lw80WOF8zzHgPLcAAAAcE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:41:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:41:21.934809 2025] [security2:error] [pid 17544:tid 17555] [client 104.207.62.41:17867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ceol.us"] [uri "/.svn/wc.db"] [unique_id "aSZMsbdIsiK1k1jqHcTRqQAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:30:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:30:35.233016 2025] [security2:error] [pid 28211:tid 28211] [client 104.207.62.41:58709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eclipsesoftware.andrew.weigel.name"] [uri "/.env"] [unique_id "aSQluwMINhKkbDOrrdpCaAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:46:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:46:45.932935 2025] [security2:error] [pid 23039:tid 23039] [client 104.207.62.41:58145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.armorcorp.gulftelecom.com"] [uri "/.svn/wc.db"] [unique_id "aSPxRdcwSE7wT5bapJfLywAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-19 10:43:18 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 19:01:48 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 06:01:44 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 22:14:18 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 181.215.182.146

🇩🇿 154.242.1.62

🇫🇷 84.46.248.28

🇺🇸 66.132.195.21

🇨🇳 49.115.219.90

🇻🇳 171.231.176.68

🇭🇰 58.152.212.239

🇺🇸 3.14.12.153

🇿🇦 160.119.253.30

🇧🇬 79.124.62.178

🇨🇳 61.142.37.242

🇸🇬 20.212.60.21

🇳🇱 5.61.209.92

🇩🇪 2a09:bac3:294f:18f0:0:27c:89:0

🇮🇳 223.233.85.193

🇵🇱 194.180.48.33

🇷🇺 178.178.222.61

🇳🇱 176.65.148.244

🇳🇱 176.65.139.181

🇺🇸 107.155.88.70