JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.42.139

104.207.42.139 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.42.139

Whois 104.207.42.139

IP Abuse Reports for 104.207.42.139:

This IP address has been reported a total of 154 times from 21 distinct sources. 104.207.42.139 was first reported on June 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-05-15 13:50:49 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇷 masterguru	2026-05-09 06:41:09 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-07 01:45:33 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-06 17:05:00 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-05-02 15:18:20 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-21 02:33:06 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.139 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-03-21 21:15:38 (3 months ago)	Forum/form spam	Web Spam
🇦🇺 MAGIC	2026-03-07 01:03:13 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 Origon	2026-02-18 03:45:18 (4 months ago)	http-sensitive-files - IP: 104.207.42.139 - time="2026-02-18T04:45:18+01:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 104.207.42.139 - time="2026-02-18T04:45:18+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.42.139 (US/200373) : 4h ban on Ip 104.207.42.139" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 03:28:10 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:28:03.378299 2026] [security2:error] [pid 6761:tid 6761] [client 104.207.42.139:27727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riser-astrology.com"] [uri "/dev/.git/config"] [unique_id "aZUxw0SdykLvvNwH4GbVrgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 02:31:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:31:23.661826 2026] [security2:error] [pid 26972:tid 26972] [client 104.207.42.139:45183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rentadeandamioscdmx.com"] [uri "/wp/.git/config"] [unique_id "aZUke7AstTZW00KLO5msrQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:50:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:50:31.049674 2026] [security2:error] [pid 1083:tid 1083] [client 104.207.42.139:61757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "r-390a.net"] [uri "/backup/.git/config"] [unique_id "aZUM18JIGG1Yl6LZnDj4gwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-02-09 19:29:34 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇦🇺 MAGIC	2026-01-29 00:18:25 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.253.13.147

🇭🇰 152.32.189.59

🇺🇸 147.185.132.241

🇺🇸 100.50.17.159

🇺🇸 52.71.45.100

🇺🇸 195.184.76.101

🇰🇷 175.119.225.68

🇯🇵 149.22.87.42

🇨🇳 123.245.84.121

🇧🇬 78.128.113.74

🇲🇾 49.124.151.25

🇨🇳 43.248.108.82

🇸🇬 43.128.113.103

🇺🇸 31.59.40.94

🇺🇸 193.37.33.67

🇧🇷 190.115.84.25

🇸🇬 185.200.116.36

🇮🇳 182.95.228.194

🇺🇸 162.216.149.227

🇨🇴 161.18.234.168