JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.40.86

104.207.40.86 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.40.86

Whois 104.207.40.86

IP Abuse Reports for 104.207.40.86:

This IP address has been reported a total of 152 times from 22 distinct sources. 104.207.40.86 was first reported on June 11th 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-08-31 20:40:09 (6 hours ago)	[20:40] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [20:40] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-31 12:47:03 (13 hours ago)	[31/Aug/2026:15:47:02 +0300] -- 104.207.40.86 Ban reason: Scanner [CMS_GENERIC] \| Request: GET http: ... show more [31/Aug/2026:15:47:02 +0300] -- 104.207.40.86 Ban reason: Scanner [CMS_GENERIC] \| Request: GET http://elconf.kpi.ua/wp-content/uploads/2016/03/ELCONF-2014.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-08-29 15:15:41 (2 days ago)	[15:15] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [15:15] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇳🇿 Antinson	2026-08-20 05:22:45 (1 week ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇳🇱 thedreamer.nl	2026-08-08 19:11:19 (3 weeks ago)	104.207.40.86 - - [08/Aug/2026:21:07:20 +0200] "GET /.git/objects/82/988eba0f180b4278e8633ffca80ace2 ... show more 104.207.40.86 - - [08/Aug/2026:21:07:20 +0200] "GET /.git/objects/82/988eba0f180b4278e8633ffca80ace2149b651 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 104.207.40.86 - - [08/Aug/2026:21:08:10 +0200] "GET /.git/objects/69/4f69b1914b1b93b92922d5862a5914d6a456c4 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 104.207.40.86 - - [08/Aug/2026:21:10:19 +0200] "GET /.git/objects/ee/cf0b8271706553c5b9f5383e36b3c724bd7bcc HTTP/1.1" 200 8932 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 104.207.40.86 - - [08/Aug/2026:21:10:19 +0200] "GET /.git/objects/68/a12f5c7652f422c42e575b75064a47d5559cc1 HTTP/1.1" 200 883 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-08-02 02:03:16 (4 weeks ago)	Web App Attack	Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 01:08:48 (3 months ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.40.86 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.40.86 2026-05-06 11:37:55 / show less	Web App Attack
🇨🇭 backslash	2025-12-22 07:55:05 (8 months ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇺🇸 nowyouknow	2025-12-14 05:05:44 (8 months ago)	(From [email protected]) Forget complex side hustles. The Writing Wizard system gives you ... show more (From [email protected]) Forget complex side hustles. The Writing Wizard system gives you the simple templates to earn consistent income from home just by writing short, 3-sentence letters. No experience needed, no selling—just easy money at your own pace. Click to Learn the Secret & Start Earning! https://themoneyfromhome.com show less	Phishing Web Spam
Anonymous	2025-11-29 02:49:29 (9 months ago)	Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.29 is noted in report ti ... show more Attempted brute force login to web vpn 24 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:42:34 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:42:30.305854 2025] [security2:error] [pid 31499:tid 31499] [client 104.207.40.86:38865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.vangentholding.com"] [uri "/.svn/wc.db"] [unique_id "aSQohtUM7-S4EY0lhlMKUgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:48:03 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:47:46.106773 2025] [security2:error] [pid 1698:tid 1698] [client 104.207.40.86:34143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haco.rcto.us"] [uri "/.env"] [unique_id "aSP_kofa9gjQtbfeh7v3vgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:52:06 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:54.685738 2025] [security2:error] [pid 14843:tid 14855] [client 104.207.40.86:31203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thatspecial.com"] [uri "/.env"] [unique_id "aSPkal0D_Mes39tIl2r5_gAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:31:39 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:31:31.610409 2025] [security2:error] [pid 24409:tid 24409] [client 104.207.40.86:20023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mute-swan.com"] [uri "/.env"] [unique_id "aSPfo1BfCvFfZYAm51ElgQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:46:11 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.40.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:46:00.121521 2025] [security2:error] [pid 21123:tid 21123] [client 104.207.40.86:54575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.healthmarkcounseling.com"] [uri "/.svn/wc.db"] [unique_id "aSPU-AoiV9Wnd7rQU3SnlwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.249.72.64

🇧🇷 201.140.243.216

🇧🇪 198.235.24.209

🇺🇸 192.204.43.48

🇺🇸 192.3.108.115

🇦🇷 190.104.36.84

🇺🇸 172.190.99.176

🇺🇸 152.32.207.172

🇷🇴 80.94.92.55

🇳🇱 68.183.3.153

🇺🇸 66.240.236.109

🇺🇸 66.132.172.128

🇺🇸 52.165.96.90

🇺🇸 35.227.76.1

🇦🇺 35.201.12.242

🇯🇵 35.200.11.248

🇳🇱 34.178.98.148

🇺🇸 34.138.2.205

🇺🇸 34.73.147.66

🇺🇸 192.34.56.73