JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.240.39.197

4.240.39.197 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 69%: ?

69%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.240.39.197

Whois 4.240.39.197

IP Abuse Reports for 4.240.39.197:

This IP address has been reported a total of 89 times from 61 distinct sources. 4.240.39.197 was first reported on September 26th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-16 05:41:21 (2 weeks ago)	Brute force	Brute-Force
🇧🇪 boxed-it	2026-06-15 06:41:17 (2 weeks ago)	GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 17:14:03 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 4.240.39.197 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 4.240.39.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:13:56.780618 2026] [security2:error] [pid 28621:tid 28621] [client 4.240.39.197:49192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.100"] [uri "/.env"] [unique_id "ai2P1NS5GKn9BHpzFLnjfQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-06-13 16:57:35 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-06-13 16:40:28 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 4.240.39.197 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 4.240.39.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:40:23.090529 2026] [security2:error] [pid 22278:tid 22278] [client 4.240.39.197:49192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.68"] [uri "/.env"] [unique_id "ai2H9yoiM0QglaDQqXMRHwAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-06-13 16:28:41 (2 weeks ago)	[2026-06-13 19:28:41] Probing for dotfiles "GET /.env HTTP/1.1" 403	Bad Web Bot Web App Attack
🇷🇺 genokrad	2026-06-13 16:19:47 (2 weeks ago)	Website scan TCP 80/443 "/.env" "Python/3.12 aiohttp/3.13.5"	Port Scan Web App Attack
🇺🇸 NXTwoThou	2026-06-13 16:18:17 (2 weeks ago)	/.env	Web App Attack
🇷🇺 DZBOT	2026-06-13 16:13:25 (2 weeks ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 HoneyPotFRI	2026-06-13 16:11:15 (2 weeks ago)	4.240.39.197 - - [13/Jun/2026:18:10:59 +0200] "GET /.env HTTP/1.1" 404 125 "-" "Python/3.12 aiohttp/ ... show more 4.240.39.197 - - [13/Jun/2026:18:10:59 +0200] "GET /.env HTTP/1.1" 404 125 "-" "Python/3.12 aiohttp/3.13.5" 4.240.39.197 [redacted] (8075-MICROSOFT-CORP-MSN-AS-BLOCK India Pune) - - [13/Jun/2026:18: ... show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-13 16:05:54 (2 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇦🇺 FEWA	2026-06-13 15:56:21 (2 weeks ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇩🇰 castipo	2026-06-13 15:45:33 (2 weeks ago)	nginx-env :: 4.240.39.197 - - [13/Jun/2026:22:45:33 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Python/ ... show more nginx-env :: 4.240.39.197 - - [13/Jun/2026:22:45:33 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Python/3.12 aiohttp/3.13.5" host="[ip]" cfip="-" cfray="-" show less	Web App Attack Hacking
Anonymous	2026-06-13 15:31:36 (2 weeks ago)	4.240.39.197 - - [13/Jun/2026:17:31:35 +0200] "GET /.env HTTP/1.1" 403 5806 "-" "Python/3.12 aiohttp ... show more 4.240.39.197 - - [13/Jun/2026:17:31:35 +0200] "GET /.env HTTP/1.1" 403 5806 "-" "Python/3.12 aiohttp/3.13.5" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:11:53 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 4.240.39.197 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 4.240.39.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:11:47.366172 2026] [security2:error] [pid 18383:tid 18430] [client 4.240.39.197:49192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.18"] [uri "/.env"] [unique_id "ai1zMzM_DWTo8cF6KZ83ZgAAAI8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 207.219.221.53

🇺🇸 207.90.244.17

🇳🇱 193.176.31.244

🇺🇸 143.198.230.165

🇳🇱 91.92.40.239

🇺🇸 66.132.195.103

🇧🇷 45.205.1.241

🇩🇪 43.228.157.17

🇬🇧 35.203.211.5

🇮🇳 20.193.141.133

🇳🇴 20.100.185.192

🇺🇸 20.65.193.226

🇬🇪 2.57.217.229

🇻🇪 201.209.29.164

🇧🇷 179.63.15.107

🇳🇱 45.156.128.164

🇵🇱 45.141.233.34

🇺🇸 34.228.104.231

🇨🇳 14.103.112.42

🇨🇦 198.100.154.28