JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.106

104.207.59.106 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.106

Whois 104.207.59.106

IP Abuse Reports for 104.207.59.106:

This IP address has been reported a total of 144 times from 17 distinct sources. 104.207.59.106 was first reported on June 8th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-04-11 12:17:20 (2 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-03-16 03:15:38 (2 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-03-02 10:14:47 (3 months ago)	Form spam	Web Spam
🇨🇭 backslash	2026-02-28 18:18:00 (3 months ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇦🇺 oncord	2026-02-20 16:25:24 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-16 08:59:42 (3 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-09 20:06:33 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:06:24.361122 2026] [security2:error] [pid 7911:tid 7911] [client 104.207.59.106:40503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galaxyretro.com"] [uri "/admin/.env"] [unique_id "aYo-QL_SqIj6tIC-6NVjCQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 18:41:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:41:22.557969 2026] [security2:error] [pid 2331134:tid 2331134] [client 104.207.59.106:34185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fvsllc.com"] [uri "/v2/.git/config"] [unique_id "aYoqUvV8EewD2BWTkIxlogAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 12:57:29 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 07:57:21.968796 2026] [security2:error] [pid 23691:tid 23691] [client 104.207.59.106:31301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingworkingcapital.com"] [uri "/backend/.env"] [unique_id "aYnZsVwo2d6xD_qvuRmp1gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 01:21:43 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 20:21:35.157836 2026] [security2:error] [pid 197942:tid 197942] [client 104.207.59.106:61259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftiptondds.com"] [uri "/admin/.env"] [unique_id "aYk2nyUhO-wFmEbyL-GfuAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-02-02 23:18:47 (4 months ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-01-29 11:43:49 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-43.104.207.59.106.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-43.104.207.59.106.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-01-23 13:16:39 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-01-21 04:39:37 (4 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-01-19 18:59:41 (4 months ago)	Form spam	Web Spam

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.74.198.58

🇵🇦 190.32.246.14

🇻🇳 171.225.201.223

🇺🇸 165.154.172.224

🇫🇮 147.185.133.187

🇨🇳 116.228.195.251

🇺🇸 91.230.168.147

🇷🇺 79.139.203.108

🇺🇸 66.132.172.102

🇳🇱 45.148.10.157

🇩🇪 45.135.141.20

🇺🇸 216.180.246.140

🇺🇸 142.251.2.188

🇰🇿 95.58.255.251

🇳🇱 91.92.241.196

🇸🇬 43.156.136.152

🇨🇭 31.7.63.6

🇺🇸 20.65.194.40

🇺🇸 20.22.206.221

🇻🇳 14.169.73.141