JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.117

104.207.40.117 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.117

Whois 104.207.40.117

IP Abuse Reports for 104.207.40.117:

This IP address has been reported a total of 137 times from 13 distinct sources. 104.207.40.117 was first reported on June 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-04-22 14:03:57 (1 month ago)	(From [email protected]) Hi Cloverleaf Chiropractic Clinic, I’ve built and trained an A ... show more (From [email protected]) Hi Cloverleaf Chiropractic Clinic, I’ve built and trained an AI employee specifically for Cloverleaf Chiropractic Clinic. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇱🇻 garmtech.com	2026-03-05 13:56:55 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-56.104.207.40.117.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-56.104.207.40.117.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-03-05 04:06:16 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-06.104.207.40.117.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-06.104.207.40.117.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:19:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:19:16.169042 2025] [security2:error] [pid 23920:tid 23920] [client 104.207.40.117:48271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rooksfamily.com"] [uri "/.env"] [unique_id "aSbUJIhbsmaZbsGu8sWEOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:17:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:17:52.401751 2025] [security2:error] [pid 9483:tid 9483] [client 104.207.40.117:51241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.blacksheepoffroad.com"] [uri "/.git/HEAD"] [unique_id "aSa3sOc3eZBFHaprqcR9zwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:15:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:15:52.082393 2025] [security2:error] [pid 30937:tid 30937] [client 104.207.40.117:27329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.amybeam.info"] [uri "/.git/HEAD"] [unique_id "aSZw6Bd70IDnE4MmZFSY5wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:43:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:43:46.902641 2025] [security2:error] [pid 10392:tid 10392] [client 104.207.40.117:25191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.curtbeams.com"] [uri "/.git/HEAD"] [unique_id "aSQMspEWORqssL9B8I7HDgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇹 Information Security	2025-10-18 21:59:23 (7 months ago)	Web App Attack	Web App Attack
Anonymous	2025-10-16 16:08:34 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-14 14:20:09 (7 months ago)	GlobalProtect login attempts with user tarencejackson.	VPN IP Brute-Force
Anonymous	2025-10-07 08:05:34 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 18:21:02 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.04 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 06:55:20 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.03 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 12:39:07 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-28 15:39:27 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.28 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.28 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:18c:0:192::e0:185

🇧🇷 200.175.61.207

🇬🇧 161.12.35.165

🇺🇸 157.245.169.157

🇨🇳 121.11.239.242

🇷🇸 91.187.148.42

🇺🇸 64.92.6.70

🇲🇾 47.250.93.212

🇳🇱 45.148.10.152

🇺🇸 18.97.5.33

🇩🇪 213.209.159.238

🇺🇸 192.210.228.134

🇫🇷 185.188.249.30

🇨🇳 111.127.152.34

🇺🇸 107.170.36.176

🇰🇷 59.24.133.197

🇺🇸 52.158.160.230

🇺🇸 49.51.196.195

🇬🇧 35.203.210.184

🇧🇪 198.235.24.242