JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.207.40.71

Activity Trending Down

Abuse Confidence Score

20% Elevated

193 reports

38 reporters · latest 2 weeks ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

193 from 38 distinct reporters

First reported

June 5th 2024

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 1 🇲🇹 Malta 1

Most common categories Web App Attack 4 Brute-Force 3 Bad Web Bot 2 Fraud VoIP 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-10-24 00:08:27 UTC · (2 weeks ago)	Web App Attack	Web App Attack
🇳🇱 Alt255	2026-10-06 15:52:58 UTC · (1 month ago)	[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.207.40.71 - - [06/Oct/2026:17:51:43 +0200] "GET /web.config.bak HTTP/1.1" 301 6317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ... show more [ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.207.40.71 - - [06/Oct/2026:17:51:43 +0200] "GET /web.config.bak HTTP/1.1" 301 6317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-10-03 15:49:42 UTC · (1 month ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇲🇹 Malta	2026-10-01 03:55:47 UTC · (1 month ago)	104.207.40.71 - - [01/Oct/2026:05:55:47 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"	Hacking Web App Attack
🇩🇪 paneologist	2026-09-15 07:39:18 UTC · (1 month ago)	2026-09-08T17:50:14+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T17:50:14.390230+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T20:05:12.315131+02:00 alpha fail2ban.act ... show more 2026-09-08T17:50:14+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T17:50:14.390230+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T20:05:12.315131+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T20:05:12+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T21:58:46+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T21:58:47.054348+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T22:57:57+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk-longterm\] Ban 104.207.40.71 2026-09-08T22:58:12+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T22:59:26.897684+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T22:59:46.843722+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk-longterm\] Ban 104.207.40.71 show less	Brute-Force
🇩🇪 paneologist	2026-09-13 18:14:52 UTC · (1 month ago)	2026-09-08T14:29:37+02:00 theta asterisk\[17133\]: WARNING\[5761\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.40.71:35840\) 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[684 ... show more 2026-09-08T14:29:37+02:00 theta asterisk\[17133\]: WARNING\[5761\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.40.71:35840\) 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[684\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'104.207.40.71:22454\' \(callid: 884510e0ce8ed26bcab3f8b76514f3bb\) - Not match Endpoint ACL 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[5761\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'104.207.40.71:22454\' \(callid: 884510e0ce8ed26bcab3f8b76514f3bb\) - Not match Endpoint ACL 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[5761\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'104.207.40.71:22454\' \(callid: 884510e0ce8ed26bcab3f8b76514f3bb\) - Faile show less	Fraud VoIP Brute-Force
🇩🇪 paneologist	2026-09-13 17:56:40 UTC · (1 month ago)	2026-09-08T17:50:14+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T17:50:14.390230+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T20:05:12.315131+02:00 alpha fail2ban.act ... show more 2026-09-08T17:50:14+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T17:50:14.390230+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T20:05:12.315131+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T20:05:12+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T21:58:46+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T21:58:47.054348+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T22:57:57+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk-longterm\] Ban 104.207.40.71 2026-09-08T22:58:12+02:00 theta fail2ban.actions\[4522\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T22:59:26.897684+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk\] Ban 104.207.40.71 2026-09-08T22:59:46.843722+02:00 alpha fail2ban.actions\[6340\]: NOTICE \[asterisk-longterm\] Ban 104.207.40.71 show less	Brute-Force
🇩🇪 paneologist	2026-09-08 21:00:05 UTC · (2 months ago)	2026-09-08T14:29:37+02:00 theta asterisk\[17133\]: WARNING\[5761\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.40.71:35840\) 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[684 ... show more 2026-09-08T14:29:37+02:00 theta asterisk\[17133\]: WARNING\[5761\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(104.207.40.71:35840\) 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[684\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'104.207.40.71:22454\' \(callid: 884510e0ce8ed26bcab3f8b76514f3bb\) - Not match Endpoint ACL 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[5761\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'104.207.40.71:22454\' \(callid: 884510e0ce8ed26bcab3f8b76514f3bb\) - Not match Endpoint ACL 2026-09-08T17:49:57+02:00 theta asterisk\[17133\]: NOTICE\[5761\]: res_pjsip/pjsip_distributor.c:676 in log_failed_request: Request \'REGISTER\' from \'\<sip:[email protected]\>\' failed for \'104.207.40.71:22454\' \(callid: 884510e0ce8ed26bcab3f8b76514f3bb\) - Faile show less	Fraud VoIP Brute-Force
🇨🇭 backslash	2026-09-08 09:57:00 UTC · (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 drewf.ink	2026-09-04 11:39:05 UTC · (2 months ago)	[11:39] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)	Web App Attack
🇫🇷 Sklurk	2026-09-02 05:05:59 UTC · (2 months ago)	Web App Attack	Web App Attack
🇺🇸 fbarela	2026-08-24 09:00:29 UTC · (2 months ago)	FortiGate SSL VPN login failures.	Brute-Force Hacking
🇫🇷 Sklurk	2026-08-04 01:04:43 UTC · (3 months ago)	Web App Attack	Web App Attack
🇩🇪 FeG Deutschland	2026-08-03 08:18:05 UTC · (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-08-03 01:02:22 UTC · (3 months ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 193 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 201.152.37.119

🇵🇹 188.83.251.62

🇨🇳 118.183.180.108

🇨🇳 116.179.37.241

🇨🇦 85.217.149.64

🇵🇱 45.138.12.40

🇺🇸 2a03:2880:f800:10::

🇵🇦 190.140.18.108

🇳🇱 188.166.85.139

🇺🇸 172.238.63.153

🇺🇸 151.243.18.193

🇲🇾 103.144.139.153

🇹🇳 102.104.130.43

🇨🇭 84.39.112.100

🇻🇳 58.186.29.49

🇫🇷 45.80.27.169

🇺🇸 45.79.191.178

🇺🇸 44.250.164.139

🇬🇧 35.203.210.170

🇺🇸 216.73.216.44