JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.42.24

104.207.42.24 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.42.24

Whois 104.207.42.24

IP Abuse Reports for 104.207.42.24:

This IP address has been reported a total of 88 times from 17 distinct sources. 104.207.42.24 was first reported on June 3rd 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-02-18 22:59:32 (4 months ago)	Auto-ban: >3000 req/min op 2026-02-18	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-02-18 03:46:34 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:46:28.934887 2026] [security2:error] [pid 3157221:tid 3157221] [client 104.207.42.24:13453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcohn.com"] [uri "/.git/config"] [unique_id "aZU2FFmSNc__8iy_12pK9AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:50:28 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:50:24.477346 2026] [security2:error] [pid 23697:tid 23697] [client 104.207.42.24:54869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulshorrock.com"] [uri "/api/.env"] [unique_id "aZUM0Gd_xT2RkiH2rjGcbAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:30:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:30:46.949912 2025] [security2:error] [pid 11410:tid 11410] [client 104.207.42.24:25601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.butterflygolem.com"] [uri "/.env"] [unique_id "aSQlxhRq09F1DORcroIAywAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:32:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:05.917805 2025] [security2:error] [pid 29166:tid 29166] [client 104.207.42.24:59287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.portraitsinblues.com"] [uri "/.env"] [unique_id "aSPfxaHHOfqlqnybYrUn0QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-22 08:16:03 (7 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.22 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-08 17:45:19 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.08 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-25 16:34:18 (7 months ago)	wordpress-trap	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-20 12:48:38 (8 months ago)	WP Admin Scan Activities	Web App Attack
🇺🇸 fbarela	2025-10-17 19:01:19 (8 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-10-15 22:02:26 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-14 17:34:35 (8 months ago)	GlobalProtect login attempts with user meierarn.	VPN IP Brute-Force
Anonymous	2025-10-13 22:37:31 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.13 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 200.26.188.219

🇧🇪 198.235.24.206

🇲🇴 182.93.7.194

🇫🇮 178.20.210.208

🇩🇴 152.166.145.205

🇮🇹 151.95.107.227

🇮🇹 95.229.5.248

🇺🇸 84.21.190.140

🇵🇱 31.182.220.15

🇮🇳 223.196.174.143

🇮🇩 180.243.177.224

🇺🇸 107.151.196.205

🇲🇦 105.158.19.173

🇰🇪 102.0.20.194

🇱🇻 81.30.98.44

🇷🇺 80.253.31.232

🇺🇸 52.20.198.190

🇧🇷 45.205.1.247

🇳🇱 45.148.10.151

🇺🇸 209.46.125.221