JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.237

104.207.40.237 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.237

Whois 104.207.40.237

IP Abuse Reports for 104.207.40.237:

This IP address has been reported a total of 149 times from 22 distinct sources. 104.207.40.237 was first reported on June 5th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-23 22:04:15 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-04.104.207.40.237.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-04.104.207.40.237.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 nowyouknow	2026-05-13 20:16:33 (3 weeks ago)	Malicious Traffic/Form Submission	Phishing Web Spam
🇺🇸 LSPCCU	2026-05-10 19:16:19 (4 weeks ago)	TSEC Honeypot Network report. Threat score: 85/100. Categories: Hacking, Brute-Force, Web App Attack ... show more TSEC Honeypot Network report. Threat score: 85/100. Categories: Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: IP observed in Suricata network metadata. show less	Hacking Brute-Force Web App Attack SSH
🇦🇺 oncord	2026-04-29 19:52:46 (1 month ago)	Form spam	Web Spam
🇫🇷 masterguru	2026-04-26 17:41:49 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-25 15:12:22 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 solution.it	2026-04-25 15:07:15 (1 month ago)	[Sat Apr 25 17:07:14.722307 2026] [php7:error] [pid 2498605:tid 2498605] [client 104.207.40.237:3044 ... show more [Sat Apr 25 17:07:14.722307 2026] [php7:error] [pid 2498605:tid 2498605] [client 104.207.40.237:30441] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-04-22 23:18:08 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-21 02:34:17 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-04-20 23:52:37 (1 month ago)	Forum/form spam	Web Spam
🇫🇷 masterguru	2026-04-14 01:26:00 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.237 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-03-17 20:47:35 (2 months ago)	Forum/form spam	Web Spam
🇪🇸 librebit	2026-03-15 02:05:48 (2 months ago)	Brute force	Brute-Force
🇦🇺 oncord	2026-03-01 03:19:05 (3 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-21 14:13:20 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.40.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.40.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 09:13:13.796870 2026] [security2:error] [pid 2003:tid 2003] [client 104.207.40.237:17403] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mollins.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mollins.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZm9eYvItbmxdg-Zk4jvywAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:8bf5:9001

🇺🇸 2604:a880:400:d1:0:4:8bef:2001

🇧🇷 205.210.31.255

🇨🇴 190.60.242.28

🇻🇳 58.186.20.101

🇺🇸 35.254.129.241

🇯🇵 34.84.252.234

🇺🇸 13.219.1.233

🇺🇸 216.25.89.110

🇧🇪 198.235.24.224

🇲🇿 196.28.226.124

🇺🇸 185.191.171.7

🇺🇸 157.254.174.96

🇮🇳 117.244.4.88

🇻🇳 113.183.11.127

🇭🇰 101.36.122.129

🇷🇺 94.228.252.2

🇺🇸 85.121.215.254

🇧🇬 78.128.113.46

🇨🇳 43.137.18.128