JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.188

104.207.40.188 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.188

Whois 104.207.40.188

IP Abuse Reports for 104.207.40.188:

This IP address has been reported a total of 143 times from 18 distinct sources. 104.207.40.188 was first reported on June 22nd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-12 05:42:07 (1 month ago)	Attempt to scan vulnerabilities	Hacking
🇮🇹 VHosting	2025-12-24 04:10:10 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-15 05:15:09 (5 months ago)	botnet	DDoS Attack
🇺🇸 COMPLEX	2025-12-15 04:28:25 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2025-12-08 04:58:42 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2025-11-26 09:46:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:46:40.764955 2025] [security2:error] [pid 19653:tid 19653] [client 104.207.40.188:55801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pbeach.com"] [uri "/.git/HEAD"] [unique_id "aSbMgMbFWBNuMkJ0C_1sEwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:10:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:10:41.984487 2025] [security2:error] [pid 3365545:tid 3365687] [client 104.207.40.188:44777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.luckystarscattery.com"] [uri "/.git/HEAD"] [unique_id "aSZhoSa0-q0nx5VbsSChpgAAAks"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:15:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:15:40.370072 2025] [security2:error] [pid 4445:tid 4445] [client 104.207.40.188:32313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swampash.lloydprins.com"] [uri "/.svn/wc.db"] [unique_id "aSZUvKH411RvUg-mn1wCUAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:59:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:59:31.770814 2025] [security2:error] [pid 24630:tid 24630] [client 104.207.40.188:43827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiny.abecasis.com"] [uri "/.git/HEAD"] [unique_id "aSZQ88eFXbluFFz5QdbwCgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:43:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:43:31.340656 2025] [security2:error] [pid 15500:tid 15500] [client 104.207.40.188:39545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aantariaconstructions.com"] [uri "/.env"] [unique_id "aSZNM_AShzwqs_jNnxtEZAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:11:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:11:10.185533 2025] [security2:error] [pid 9705:tid 9705] [client 104.207.40.188:37031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.frigate-airways.brenna-droege.com"] [uri "/.svn/wc.db"] [unique_id "aSZFniErf-rrSgYFrVrq3wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:22:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:22:09.132342 2025] [security2:error] [pid 5149:tid 5149] [client 104.207.40.188:56611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onlinepetsuperstore.banis-associates.com"] [uri "/.git/HEAD"] [unique_id "aSQVsZacG-tzgwU50xk3GgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:29:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:12.360937 2025] [security2:error] [pid 4126:tid 4126] [client 104.207.40.188:25831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sheargrafix.com"] [uri "/.git/HEAD"] [unique_id "aSP7OH6urDc60gqoFEXRzQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:13:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:13:39.798279 2025] [security2:error] [pid 3276368:tid 3276368] [client 104.207.40.188:28877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wilburmanagementgroup.com"] [uri "/.svn/wc.db"] [unique_id "aSPbc2gWqyPxRlGjWRPopQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 07:46:25 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.182.195.181

🇧🇷 187.62.87.27

🇺🇸 162.216.149.223

🇺🇸 159.203.66.224

🇮🇩 157.15.73.34

🇺🇸 147.185.132.130

🇳🇱 86.54.31.44

🇺🇸 64.62.197.30

🇳🇱 45.148.10.152

🇧🇪 34.62.222.86

🇺🇸 199.188.203.212

🇺🇸 185.226.196.12

🇳🇱 176.65.149.168

🇧🇪 128.90.145.5

🇨🇳 119.167.206.194

🇺🇸 91.230.168.32

🇻🇳 27.79.44.206

🇮🇳 182.95.116.66

🇩🇪 167.94.145.28

🇳🇱 160.119.69.14