JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.31

104.207.40.31 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 44%: ?

44%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.31

Whois 104.207.40.31

IP Abuse Reports for 104.207.40.31:

This IP address has been reported a total of 154 times from 23 distinct sources. 104.207.40.31 was first reported on June 4th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-08-31 17:50:47 (1 day ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇬🇷 setupgr	2026-08-31 08:13:52 (1 day ago)	(wplogin_block) Blocked WP-Login Access Attempt 104.207.40.31 (US/United States/Virginia/Ashburn/-/[ ... show more (wplogin_block) Blocked WP-Login Access Attempt 104.207.40.31 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.207.40.31 - - [31/Aug/2026:11:13:17 +0300] "POST /wp-login.php HTTP/1.1" 302 - "https://cpanagiotou.gr/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Port Scan
🇫🇷 ELYAZ	2026-08-31 03:29:28 (1 day ago)	(wordpress) Failed wordpress login from 104.207.40.31 (US/United States/-): (CF_ENABLE)	Brute-Force
🇺🇸 lostswordfish.com	2026-08-30 04:36:05 (2 days ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇩🇪 conseilgouz	2026-08-29 12:13:03 (3 days ago)	sle-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇮🇹 VHosting	2026-08-28 19:10:04 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇪🇸 librebit	2026-07-16 18:09:06 (1 month ago)	Brute force	Brute-Force
🇫🇮 inlink.ltd	2026-05-25 10:31:26 (3 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 LSPCCU	2026-05-10 17:15:07 (3 months ago)	TSEC Honeypot Network report. Threat score: 66/100. Categories: Hacking. Honeypot: ssh-telnet, cowri ... show more TSEC Honeypot Network report. Threat score: 66/100. Categories: Hacking. Honeypot: ssh-telnet, cowrie. Context: IP observed in Suricata network metadata. show less	Hacking
🇮🇹 VHosting	2025-12-24 06:55:08 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-02 22:41:35 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:41:30.163736 2025] [security2:error] [pid 25378:tid 25378] [client 104.207.40.31:13415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dibaplac.com"] [uri "/.git/HEAD"] [unique_id "aS9rGuT_U8Mtar9DHkEg4wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:22:29 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:22:22.512527 2025] [security2:error] [pid 8106:tid 8106] [client 104.207.40.31:17303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexlacruz.com"] [uri "/.git/HEAD"] [unique_id "aS9mnhTmwuX-UzthKWvKrwAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 18:47:45 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 13:47:41.071513 2025] [security2:error] [pid 3137:tid 3137] [client 104.207.40.31:28389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "privateshoretour.com"] [uri "/.svn/wc.db"] [unique_id "aS80TTucPdLHyNhYhqSghwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:42:37 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:42:33.977276 2025] [security2:error] [pid 881:tid 881] [client 104.207.40.31:18013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magodarman.com"] [uri "/.svn/wc.db"] [unique_id "aS8I6SP8RpEIQ5pY6YZkbwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:21:11 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:21:03.616820 2025] [security2:error] [pid 41304:tid 41379] [client 104.207.40.31:16877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dermatologycoloradosprings.com"] [uri "/.env"] [unique_id "aS53PxKSX68sdf8Rl3qmfgAAAcw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇮🇩 163.7.6.114

🇦🇺 125.209.144.199

🇨🇳 112.111.57.33

🇺🇸 84.32.137.88

🇸🇳 213.154.77.61

🇵🇰 203.215.181.200

🇺🇸 147.185.132.15

🇰🇷 115.20.171.54

🇹🇼 110.25.107.25

🇫🇷 91.196.152.191

🇳🇱 45.148.10.151

🇮🇷 37.202.180.112

🇬🇧 5.226.140.18

🇷🇺 5.17.3.32

🇺🇸 4.148.240.195

🇷🇴 2.57.122.53

🇫🇷 207.180.243.111

🇺🇸 143.198.174.13

🇨🇳 118.196.119.108