JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.104

104.207.59.104 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.104

Whois 104.207.59.104

IP Abuse Reports for 104.207.59.104:

This IP address has been reported a total of 124 times from 21 distinct sources. 104.207.59.104 was first reported on June 14th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-01 21:59:06 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-31. show less	Web App Attack SSH Hacking
Anonymous	2026-05-31 00:25:01 (1 week ago)	suspicious request in access.log	Web App Attack
🇺🇸 mnsf	2026-05-31 00:05:14 (1 week ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 interbiznw.com	2026-05-30 23:06:17 (1 week ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇨🇭 4server	2026-05-03 23:56:36 (1 month ago)	[MonMay0401:56:29.5989312026][security2:error][pid2782077:tid2782308][client104.207.59.104:0]ModSecu ... show more [MonMay0401:56:29.5989312026][security2:error][pid2782077:tid2782308][client104.207.59.104:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ticino-hosting.ch\"][uri\"/\"][unique_id\"affgreI5cUPlGb2z8U-UQQAAAI0\"] show less	Hacking Web App Attack
🇧🇷 Halux	2026-04-27 10:46:09 (1 month ago)	104.207.59.104 Probing protected path or service	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-21 07:36:49 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇫🇷 conseilgouz	2025-12-30 07:04:02 (5 months ago)	sie-7 : Trying access unauthorized files/dir=>//wp-admin/setup-config.php	Hacking
🇳🇱 JCB	2025-12-26 13:44:00 (5 months ago)	104.207.59.104 - - [26/Dec/2025:12:28:34 +0200] "GET //wp-admin/setup-config.php HTTP/1.1" 404 236	Web App Attack
Anonymous	2025-12-15 05:00:13 (5 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2025-12-13 06:29:54 (5 months ago)	wordpress-trap	Web App Attack
🇨🇦 Anymous	2025-12-07 05:48:44 (6 months ago)	GET /old//installer-backup.php HTTP/1.1 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show more GET /old//installer-backup.php HTTP/1.1 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 21:33:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:33:37.032412 2025] [security2:error] [pid 4075:tid 4075] [client 104.207.59.104:27789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "farsipraiseclub.com"] [uri "/.env"] [unique_id "aSjDsQYw--r-WYGBn5TMMQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:09:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:09:41.759989 2025] [security2:error] [pid 12005:tid 12048] [client 104.207.59.104:19263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oldramona.mailporte.com"] [uri "/.env"] [unique_id "aSQSxTBPFl6aUrWWAmcwrAAAAUo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:49:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:48:54.792485 2025] [security2:error] [pid 10701:tid 10701] [client 104.207.59.104:48453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.chronoton.com"] [uri "/.svn/wc.db"] [unique_id "aSP_1qndVxocLllZeaeXDQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇹 109.49.23.192

🇫🇷 173.212.213.201

🇧🇩 144.79.133.50

🇮🇶 138.124.158.150

🇨🇳 123.244.62.87

🇨🇳 113.141.72.65

🇫🇷 80.67.167.81

🇺🇸 20.127.185.5

🇻🇳 14.191.177.244

🇩🇪 213.209.159.11

🇨🇳 139.170.141.170

🇨🇳 27.18.96.55

🇻🇳 14.186.49.93

🇺🇸 207.90.244.10

🇺🇸 104.164.182.104

🇮🇩 103.154.231.122

🇸🇬 101.47.8.187

🇨🇳 27.27.134.5

🇺🇸 3.91.109.62

🇷🇴 2.57.121.112