JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.4

104.207.40.4 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.4

Whois 104.207.40.4

IP Abuse Reports for 104.207.40.4:

This IP address has been reported a total of 87 times from 16 distinct sources. 104.207.40.4 was first reported on June 21st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-12 05:43:10 (1 month ago)	Attempt to scan vulnerabilities	Hacking
🇺🇸 TPI-Abuse	2026-03-02 21:08:22 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 16:08:14.351110 2026] [security2:error] [pid 3277:tid 3277] [client 104.207.40.4:54115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.trafficstopper.com"] [uri "/.git/HEAD"] [unique_id "aaX8Ptz5VeC7e3qYHkaUKwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-28 14:29:36 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 09:29:31.307985 2026] [security2:error] [pid 5575:tid 5575] [client 104.207.40.4:58285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.zydecajun.radio.fm"] [uri "/.env"] [unique_id "aaL7y8Tw0QUA7hKBeqZF-gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-02-15 09:29:23 (3 months ago)	2026-02-15 10:29:22 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
Anonymous	2025-12-14 13:29:18 (5 months ago)	botnet	DDoS Attack
Anonymous	2025-11-29 17:47:51 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.29 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-29 16:18:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 11:18:44.243474 2025] [security2:error] [pid 15464:tid 15464] [client 104.207.40.4:24109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cbcfargo.com"] [uri "/.git/config"] [unique_id "aSsc5NLWE64JyVW1dA5HJwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 01:09:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 20:09:29.393291 2025] [security2:error] [pid 24479:tid 24479] [client 104.207.40.4:53709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.linguistes.com"] [uri "/wp-config.php.bak"] [unique_id "aSj2Sc-OPhG_A54uhYJjywAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 22:51:08 (6 months ago)	Attempted brute force login to web vpn 15 time(s); last attempt for 2025.11.17 is noted in report ti ... show more Attempted brute force login to web vpn 15 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-13 22:20:42 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-11 21:24:00 (6 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.11 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-08 19:08:09 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.08 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 04:38:13 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-15 08:12:03 (7 months ago)	GlobalProtect login attempts with user fisherharrison.	VPN IP Brute-Force
Anonymous	2025-10-11 08:11:17 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 170.233.6.12

🇺🇸 216.194.172.68

🇩🇪 213.209.159.225

🇮🇩 202.58.193.32

🇳🇱 193.176.31.229

🇮🇳 182.95.230.142

🇫🇷 163.5.241.76

🇻🇳 103.48.192.48

🇺🇸 67.220.180.90

🇫🇷 51.255.131.231

🇨🇳 36.32.70.83

🇧🇷 177.204.20.198

🇩🇪 141.11.187.21

🇹🇼 101.13.6.86

🇷🇴 92.118.39.236

🇮🇳 188.241.62.83

🇮🇳 119.13.229.122

🇨🇳 113.101.15.93

🇮🇳 103.250.151.241

🇳🇱 89.21.67.189