JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.46.40

104.207.46.40 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.46.40

Whois 104.207.46.40

IP Abuse Reports for 104.207.46.40:

This IP address has been reported a total of 131 times from 13 distinct sources. 104.207.46.40 was first reported on June 7th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 inspectorgdgt	2025-12-24 22:00:00 (5 months ago)	VPN brute-force login attempts observed (bulk report).	Brute-Force
Anonymous	2025-12-14 11:05:59 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 06:23:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:23:15.455037 2025] [security2:error] [pid 16642:tid 16642] [client 104.207.46.40:14685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.impactqualityinc.com"] [uri "/.env"] [unique_id "aSVLU-3_7vgNCXi5I_MwVAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:59:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:59:53.461139 2025] [security2:error] [pid 12234:tid 12234] [client 104.207.46.40:11119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kevinlaliberte.com"] [uri "/.svn/wc.db"] [unique_id "aSU3yUTP5EPhFEbyHSZVygAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:12:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:12:37.555438 2025] [security2:error] [pid 9641:tid 9641] [client 104.207.46.40:60201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bitcoinpornhub.com"] [uri "/.env"] [unique_id "aSUepVNXVH-zdQ2CZhJqFgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:09:31 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:09:26.252236 2025] [security2:error] [pid 11380:tid 11380] [client 104.207.46.40:11477] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|skipspsaexchange.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "skipspsaexchange.com"] [uri "/wp-admin.db"] [unique_id "aSUP1ph94j-MyQs9D0_z6wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:05:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.46.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:05:02.443303 2025] [security2:error] [pid 18446:tid 18446] [client 104.207.46.40:34329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heboworld.com.halotoys.com"] [uri "/.svn/wc.db"] [unique_id "aSTyrhe8n--EooNV2fVG0QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2025-10-30 23:27:46 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 10/30/2025 11:27 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2025-10-30 20:36:48 (7 months ago)	wordpress-trap	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-28 22:44:24 (7 months ago)	WP Admin Scan Activities	Web App Attack
Anonymous	2025-10-18 04:27:15 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 18:22:19 (7 months ago)	GlobalProtect login attempts with user mflorence.	VPN IP Brute-Force
Anonymous	2025-10-11 05:03:24 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 12:23:32 (7 months ago)	Attempted brute force login to web vpn 91 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 91 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 20:24:17 (7 months ago)	Attempted brute force login to web vpn 127 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 127 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.188

🇺🇸 47.251.34.107

🇺🇸 205.210.31.18

🇩🇪 159.223.19.41

🇺🇸 147.185.132.252

🇺🇸 147.185.132.240

🇺🇸 147.185.132.231

🇺🇸 147.185.132.40

🇮🇳 122.185.178.218

🇨🇦 85.217.149.41

🇺🇸 45.156.129.95

🇧🇷 43.157.163.155

🇭🇰 223.197.178.95

🇧🇪 198.235.24.232

🇲🇽 189.206.189.150

🇺🇸 147.185.132.243

🇺🇸 147.185.132.22

🇺🇸 147.185.132.21

🇺🇿 82.215.104.197

🇮🇳 52.172.177.191