JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.140

104.207.39.140 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.140

Whois 104.207.39.140

IP Abuse Reports for 104.207.39.140:

This IP address has been reported a total of 155 times from 26 distinct sources. 104.207.39.140 was first reported on June 4th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 00:09:36 (15 hours ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-06-25 06:08:12 (2 weeks ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-06-20 04:02:45 (2 weeks ago)	Web App Attack	Web App Attack
🇦🇺 oncord	2026-05-01 14:55:29 (2 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-25 15:31:26 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-19 10:29:06 (4 months ago)	Form spam	Web Spam
🇳🇱 jjnxpct	2026-02-19 04:49:56 (4 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /test/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇳🇱 BlueWire Hosting	2026-02-19 01:55:38 (4 months ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 01:42:01 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:41:53.239530 2026] [security2:error] [pid 29124:tid 29124] [client 104.207.39.140:35525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karakostasconstruction.com"] [uri "/frontend/.env"] [unique_id "aZZqYSEYty_NGtBGZnV2KAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:31:56 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:31:50.237970 2026] [security2:error] [pid 1704039:tid 1704068] [client 104.207.39.140:19535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vote4joegardner.com"] [uri "/.env.local"] [unique_id "aZZZ9poaRHSTQkGyepItVgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-18 21:05:19 (4 months ago)	Scanning/Probing (21)	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-02-18 20:01:20 (4 months ago)	Blocking for trying to access an exploit file: /new/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-18 18:42:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:42:44.728982 2026] [security2:error] [pid 4271:tid 4271] [client 104.207.39.140:59161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thirdplanettechnology.space"] [uri "/new/.git/config"] [unique_id "aZYIJOX_lAuPaSW06hUNJQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:26:14 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:26:08.052630 2026] [security2:error] [pid 14123:tid 14198] [client 104.207.39.140:21317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thetooheys.com"] [uri "/api/.git/config"] [unique_id "aZYEQHkMz8EHxVRrXryq8wAAAQQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-02-18 13:35:54 (4 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.58.1.20

🇧🇴 138.84.37.127

🇮🇳 103.157.149.14

🇷🇴 92.118.39.49

🇺🇸 52.177.169.196

🇳🇱 45.156.87.153

🇺🇸 18.116.101.220

🇷🇴 2.57.122.150

🇸🇬 194.61.41.4

🇨🇳 112.123.60.133

🇻🇳 222.255.250.29

🇳🇱 176.65.148.2

🇯🇵 161.33.210.117

🇸🇬 152.42.223.176

🇧🇷 149.78.202.137

🇺🇸 132.148.155.138

🇺🇸 74.115.172.118

🇺🇸 71.6.235.94

🇺🇸 51.194.85.220

🇺🇸 2600:1f16:743:ac01:a122:6b91:fade:4f7b