JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.32.242

104.207.32.242 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.32.242

Whois 104.207.32.242

IP Abuse Reports for 104.207.32.242:

This IP address has been reported a total of 161 times from 19 distinct sources. 104.207.32.242 was first reported on June 5th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-10 14:40:36 (5 days ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇳🇱 jjnxpct	2026-04-03 03:48:38 (2 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /fr/component/avendre/blog (Rule ID: 942540) - SQL Authentication bypass (split query) [Suspicious: '; found within ARGS:start: ';] show less	Web App Attack SQL Injection Brute-Force
🇳🇱 Site.eu	2026-04-02 23:21:22 (2 months ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 relianoid.com	2026-03-05 09:26:48 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2026-01-25 05:06:35 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2025-11-27 08:38:15 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.27 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 10:02:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:02:06.828844 2025] [security2:error] [pid 31669:tid 31669] [client 104.207.32.242:56965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cormanleigh.com"] [uri "/.svn/wc.db"] [unique_id "aSbQHjXniKitLDNbAVR-7AAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:38:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:38:42.438799 2025] [security2:error] [pid 11074:tid 11074] [client 104.207.32.242:54773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.starfrontiers.com"] [uri "/.env"] [unique_id "aSbKooZTm15l3iJhpIRBmwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:23:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:23:22.316549 2025] [security2:error] [pid 32599:tid 32599] [client 104.207.32.242:36847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.timezonespro.com"] [uri "/.env"] [unique_id "aSa4-vIrn68qDSPJ_6pT3QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:24:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:24:47.689944 2025] [security2:error] [pid 14538:tid 14538] [client 104.207.32.242:36541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tucsondivorcelawyer.com"] [uri "/.git/HEAD"] [unique_id "aSZy_4ZaMZg0OfhaPIGf6wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-26 03:14:35 (6 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:28:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:28:32.222792 2025] [security2:error] [pid 5425:tid 5443] [client 104.207.32.242:32131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wicca-love-spells.com"] [uri "/.env"] [unique_id "aSZJsFoBK930f_mgSwGqmgAAAVA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:10:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:10:14.520744 2025] [security2:error] [pid 337:tid 337] [client 104.207.32.242:46519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.xn--lyngr-yua.net"] [uri "/.env"] [unique_id "aSZFZksxximd4KXrwM9mWQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:38:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:58.272233 2025] [security2:error] [pid 9342:tid 9342] [client 104.207.32.242:37887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.samanthasomers.com"] [uri "/.env"] [unique_id "aSQZZjr7zDX-XpKagLJISAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:09:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.32.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:09:35.536020 2025] [security2:error] [pid 20133:tid 20133] [client 104.207.32.242:33579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dick-schoonover.com"] [uri "/.git/HEAD"] [unique_id "aSQSv3O8Kdy2IIpK2iApcQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 196.202.80.94

🇬🇧 194.50.235.153

🇮🇷 176.65.191.64

🇮🇳 136.232.11.10

🇺🇸 136.109.65.52

🇮🇳 125.21.59.218

🇻🇳 103.252.123.105

🇷🇴 92.118.39.62

🇺🇸 66.132.172.225

🇰🇷 59.21.37.60

🇺🇸 45.8.19.104

🇸🇬 34.158.32.178

🇮🇪 20.13.164.162

🇺🇸 2607:f8b0:4001:c20::124

🇭🇰 185.239.84.249

🇵🇱 178.219.98.152

🇺🇸 150.107.38.131

🇨🇭 107.189.28.30

🇺🇸 100.50.17.159

🇹🇷 87.232.127.53