JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.14

104.207.40.14 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.14

Whois 104.207.40.14

IP Abuse Reports for 104.207.40.14:

This IP address has been reported a total of 86 times from 17 distinct sources. 104.207.40.14 was first reported on June 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-04-09 17:28:13 (1 month ago)	Form spam	Web Spam
🇫🇷 mrcrassi	2026-02-12 21:56:34 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-11-25 22:59:22 (6 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-24. show less	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-24 06:43:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:43:22.828500 2025] [security2:error] [pid 24567:tid 24567] [client 104.207.40.14:43891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aschmidtconsulting.com"] [uri "/.env"] [unique_id "aSP-inbw_RB5kErDxJwE9gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:08:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:07:59.897393 2025] [security2:error] [pid 19390:tid 19390] [client 104.207.40.14:23683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.peggyannjones.us"] [uri "/.svn/wc.db"] [unique_id "aSP2P2jnl1PGZmFTHpr5vAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:57:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:57:01.273552 2025] [security2:error] [pid 16542:tid 16542] [client 104.207.40.14:11073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yanchuk.org"] [uri "/.svn/wc.db"] [unique_id "aSPlnS2tZGL798kGmaGFVwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-18 03:50:26 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-15 15:29:41 (7 months ago)	GlobalProtect login attempts with user lpelaez.	VPN IP Brute-Force
🇱🇻 garmtech.com	2025-10-10 14:25:29 (7 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
Anonymous	2025-10-04 05:55:52 (8 months ago)	Attempted brute force login to web vpn 56 time(s); last attempt for 2025.10.04 is noted in report ti ... show more Attempted brute force login to web vpn 56 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 07:32:13 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 12:25:28 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.02 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-29 10:19:45 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.29 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-27 14:11:02 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 03:54:32 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.170.249.78

🇧🇷 190.89.136.164

🇧🇬 185.255.212.178

🇺🇸 172.235.40.131

🇸🇪 171.25.158.68

🇳🇱 146.190.234.223

🇺🇸 135.237.126.217

🇺🇸 91.230.168.105

🇨🇦 85.217.149.22

🇺🇸 72.167.151.62

🇺🇸 66.132.172.225

🇮🇳 59.92.107.19

🇨🇳 58.19.83.102

🇭🇰 47.86.191.126

🇬🇧 37.10.113.218

🇫🇮 34.88.32.136

🇮🇩 34.50.75.32

🇻🇳 14.225.7.70

🇬🇧 217.146.80.98

🇧🇪 198.235.24.236