JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.7

104.207.40.7 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.7

Whois 104.207.40.7

IP Abuse Reports for 104.207.40.7:

This IP address has been reported a total of 122 times from 27 distinct sources. 104.207.40.7 was first reported on June 5th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-01 01:37:33 (7 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 00:08:28 (1 day ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-07-17 23:23:47 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-23.104.207.40.7.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-23.104.207.40.7.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-14 23:12:38 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-12.104.207.40.7.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-12.104.207.40.7.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-13 15:03:46 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-03.104.207.40.7.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-03.104.207.40.7.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 barbarella	2026-05-10 18:24:03 (2 months ago)	unauthorized access to Visual Studio Code - SFTP Extension (GET /wp-json/gravitysmtp/v1/tests/mock-d ... show more unauthorized access to Visual Studio Code - SFTP Extension (GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings) show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-05-09 23:59:14 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-59.104.207.40.7.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-59.104.207.40.7.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇬🇧 relianoid.com	2026-02-18 14:10:10 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇳🇱 jjnxpct	2026-02-16 04:54:34 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /test/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:38:30 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:38:26.423618 2026] [security2:error] [pid 27390:tid 27390] [client 104.207.40.7:36127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pascoyardsale.com"] [uri "/api/.git/config"] [unique_id "aZG-Qts1U_0EM_yMR4D0VQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:48:17 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:48:10.856629 2026] [security2:error] [pid 31169:tid 31169] [client 104.207.40.7:61927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paguilar.com"] [uri "/config/.env"] [unique_id "aZGyer7a0_qRfNBHdHYwPwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:20:16 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:20:07.622541 2026] [security2:error] [pid 25545:tid 25545] [client 104.207.40.7:53023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onlineteacher.info"] [uri "/wp/.git/config"] [unique_id "aZFllxcVCbQs38Nx_mz7TgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-02-15 06:17:24 (5 months ago)	http-sensitive-files - IP: 104.207.40.7 - time="2026-02-15T07:17:24+01:00" level=info msg="(555f66b ... show more http-sensitive-files - IP: 104.207.40.7 - time="2026-02-15T07:17:24+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.40.7 (US/200373) : 4h ban on Ip 104.207.40.7" module=db show less	Web App Attack
🇧🇪 voormedia	2026-02-15 05:58:37 (5 months ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:22:36 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:22:30.708698 2026] [security2:error] [pid 29355:tid 29355] [client 104.207.40.7:21583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "printedmatchbooks.com"] [uri "/.env"] [unique_id "aZFYFi6aG6sC4LLIB3UpnAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.19

🇺🇦 195.114.145.28

🇩🇪 185.220.101.35

🇨🇳 115.231.78.11

🇨🇳 115.148.206.220

🇻🇳 103.179.174.112

🇺🇦 93.170.161.77

🇳🇱 91.92.40.43

🇺🇸 18.189.74.1

🇺🇸 2607:f8b0:4001:c0e::129

🇸🇬 2404:6800:4003:c0f::123

🇫🇷 185.177.72.23

🇺🇸 162.240.75.182

🇺🇸 147.185.132.37

🇨🇳 111.26.69.160

🇸🇬 47.82.54.241

🇳🇱 45.148.10.157

🇺🇸 40.124.174.207

🇬🇧 35.203.211.138

🇬🇷 2.84.232.100