JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.42.73

104.207.42.73 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.42.73

Whois 104.207.42.73

IP Abuse Reports for 104.207.42.73:

This IP address has been reported a total of 138 times from 16 distinct sources. 104.207.42.73 was first reported on June 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-05-13 15:16:41 (3 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.42.73 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.42.73 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-01-27 16:53:14 (4 months ago)	2026-01-27T18:53:14.186839+02:00 zanati wp(www.sahpa.co.za)[786400]: Blocked authentication attempt ... show more 2026-01-27T18:53:14.186839+02:00 zanati wp(www.sahpa.co.za)[786400]: Blocked authentication attempt for [email protected] from 104.207.42.73 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:27:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:27:14.308033 2025] [security2:error] [pid 24539:tid 24539] [client 104.207.42.73:57071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.vtmooses.us"] [uri "/.env"] [unique_id "aSPsskiWf-pAg78rcm_i8AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:29:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:29:17.798265 2025] [security2:error] [pid 3965259:tid 3965345] [client 104.207.42.73:27859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ouye.net"] [uri "/.env"] [unique_id "aSPfHcHsvdKIeQe-cM__KAAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:48:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:47:52.200665 2025] [security2:error] [pid 28855:tid 28855] [client 104.207.42.73:24515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.scr-publications.com"] [uri "/.git/HEAD"] [unique_id "aSPVaAo0zIm69WJCTmt1igAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2025-11-19 07:02:15 (6 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-11-14 03:32:38 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-17 22:04:15 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-15 16:09:45 (7 months ago)	GlobalProtect login attempts with user tdelin.	VPN IP Brute-Force
Anonymous	2025-10-11 04:32:24 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 21:08:52 (7 months ago)	Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 180 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 09:46:31 (7 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 16:12:04 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 22:37:49 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-06 16:13:23 (8 months ago)	Attempted brute force login to web vpn 82 time(s); last attempt for 2025.10.06 is noted in report ti ... show more Attempted brute force login to web vpn 82 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.195.46

🇧🇷 190.89.246.30

🇺🇸 72.167.50.103

🇩🇪 64.89.163.156

🇱🇹 45.227.254.170

🇸🇳 41.82.50.218

🇨🇳 14.103.123.6

🇧🇪 198.235.24.156

🇩🇪 185.242.3.173

🇱🇾 156.38.42.118

🇮🇩 145.79.14.212

🇨🇳 115.55.53.223

🇧🇩 61.247.188.118

🇩🇪 2a02:4780:3f:1789:0:15da:34e2:1

🇮🇳 2401:4900:8f61:b78:8b:b78e:7c17:5017

🇮🇱 203.159.81.12

🇪🇪 196.245.216.81

🇧🇷 179.176.210.17

🇻🇳 171.231.176.86

🇫🇷 141.95.129.178