JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.42.8

104.207.42.8 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 38%: ?

38%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.42.8

Whois 104.207.42.8

IP Abuse Reports for 104.207.42.8:

This IP address has been reported a total of 101 times from 21 distinct sources. 104.207.42.8 was first reported on June 13th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-06-15 10:20:06 (1 day ago)	Wordfence waf block on fypeducation	Web App Attack
Anonymous	2026-06-14 12:19:33 (2 days ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇮🇹 sssrit	2026-06-14 08:45:13 (2 days ago)	104.207.42.8 - - [14/Jun/2026:10:43:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3265 "https://www.face ... show more 104.207.42.8 - - [14/Jun/2026:10:43:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3265 "https://www.facebook.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 104.207.42.8 - - [14/Jun/2026:10:45:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 iNetWorker	2026-06-13 07:11:53 (3 days ago)	trolling for resource vulnerabilities	Web App Attack
🇬🇷 setupgr	2026-06-12 14:31:03 (4 days ago)	(mod_security) mod_security (id:900001) triggered by 104.207.42.8: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:900001) triggered by 104.207.42.8: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 17:30:58.792534 2026] [security2:error] [pid 326673:tid 326855] [client 104.207.42.8:19847] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aiwYIo3XoGur1n4mJeRMygAAAZI"], referer: https://mail.doityourself.gr/wp-login.php show less	Port Scan
🇲🇽 octageeks.com	2026-06-12 04:24:10 (4 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 06:47:21 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 01:47:17.328279 2026] [security2:error] [pid 25575:tid 25575] [client 104.207.42.8:55235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mgiexperience.digitalracemedia.com"] [uri "/.git/config"] [unique_id "aZ1Jddr47arMz1ZZPzyzXQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 18:53:30 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 13:53:24.334133 2026] [security2:error] [pid 23808:tid 23808] [client 104.207.42.8:40713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calgaryhottubsale.wholesalelivelobsters.com"] [uri "/.git/config"] [unique_id "aZyiJHvON2JEDagakSp6igAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 19:00:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.42.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.42.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:00:45.276439 2025] [security2:error] [pid 1759323:tid 1759342] [client 104.207.42.8:28613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aclarityforensics.com"] [uri "/.svn/wc.db"] [unique_id "aSif3e3nUTBY5P1pM1_ZRQAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2025-11-26 04:22:08 (6 months ago)	2025-11-26 @ 05:22:08 (CET) ~ Blocked for trying to access: /.aws/credentials	Web App Attack
🇺🇸 nowyouknow	2025-11-22 03:09:16 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, co ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> https://themoneyfromhome.com show less	Phishing Web Spam
Anonymous	2025-11-20 00:16:52 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.20 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.20 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 nowyouknow	2025-11-20 00:15:18 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, cou ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> THEmoneyfromhome.com show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-16 08:52:28 (7 months ago)	(From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models wit ... show more (From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models with All Versions + All Upcoming Future Versions… Without Spending A Penny … https://1x-slots.site/MultiverseAI to UNSUBSCRIBE: https://1x-slots.site/unsubscribe?domain=hadleychiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
Anonymous	2025-11-14 11:44:13 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.93.147.233

🇧🇷 177.7.30.146

🇫🇮 147.185.133.132

🇨🇳 120.48.53.174

🇯🇵 103.147.14.125

🇧🇬 79.124.59.78

🇩🇪 69.5.169.44

🇺🇸 66.132.172.228

🇩🇪 54.93.118.121

🇳🇱 45.142.193.169

🇺🇸 45.77.187.54

🇮🇳 20.44.58.80

🇺🇸 20.25.151.124

🇩🇪 5.45.98.53

🇺🇸 192.220.48.198

🇺🇸 192.210.206.103

🇮🇳 182.95.231.82

🇺🇸 157.245.253.169

🇨🇳 123.160.223.72

🇨🇳 112.103.128.56