JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.112

104.207.59.112 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.112

Whois 104.207.59.112

IP Abuse Reports for 104.207.59.112:

This IP address has been reported a total of 123 times from 13 distinct sources. 104.207.59.112 was first reported on June 11th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2026-02-13 23:19:51 (3 months ago)	Unauthorized web scan.	Web App Attack
🇦🇺 2000cn.com.au	2026-02-11 21:05:26 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 06:28:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:28:43.707658 2026] [security2:error] [pid 5038:tid 5038] [client 104.207.59.112:55131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/.git/config"] [unique_id "aYrQG3UMbToRPepRp1NvAwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 01:53:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:52:59.919402 2026] [security2:error] [pid 29544:tid 29544] [client 104.207.59.112:28091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hxctechllc.com"] [uri "/frontend/.env"] [unique_id "aYqPe9Av3gzpj4lRDnPH-wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:20:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:20:24.985202 2026] [security2:error] [pid 7520:tid 7520] [client 104.207.59.112:9287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrywelt.com"] [uri "/config/.env"] [unique_id "aYp5yGQKB-nrgxiIrNmapAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:42:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:42:16.002344 2026] [security2:error] [pid 17573:tid 17573] [client 104.207.59.112:15083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelting.net"] [uri "/.env.staging"] [unique_id "aYpw2FkpNKLDtwoGGUcJ-gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-09 22:59:49 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-09	Hacking Web App Attack SSH
🇮🇹 VHosting	2025-12-31 12:40:07 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-25 19:10:16 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 04:08:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:27.532351 2025] [security2:error] [pid 870:tid 870] [client 104.207.59.112:18811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sailorbandido.com"] [uri "/.env"] [unique_id "aSUruyqe69_DtJ96RS6qDAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:29:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:29:12.974040 2025] [security2:error] [pid 5776:tid 5776] [client 104.207.59.112:16983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csmedicalbilling.com"] [uri "/.svn/wc.db"] [unique_id "aSUiiGWUsJTmhCDIaffyAwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:17:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:17:21.372293 2025] [security2:error] [pid 3620:tid 3620] [client 104.207.59.112:9427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ohanameetup.party"] [uri "/.git/HEAD"] [unique_id "aSUDoZby-h0R7C2v5HMnsgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-04 17:51:02 (7 months ago)		Web App Attack
Anonymous	2025-04-07 05:32:44 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 16:56:29 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.244.66.239

🇺🇸 195.184.76.98

🇸🇬 74.114.31.150

🇩🇪 69.5.169.223

🇯🇵 2600:1900:41d0:cf8b:0:1::

🇺🇸 195.184.76.126

🇩🇪 193.124.20.249

🇩🇪 185.220.101.174

🇺🇸 156.239.253.250

🇺🇸 147.185.132.24

🇮🇳 143.110.177.177

🇧🇷 118.26.105.144

🇨🇳 115.191.73.24

🇺🇸 113.20.4.9

🇮🇹 93.92.78.177

🇺🇸 65.49.20.66

🇳🇱 64.89.162.78

🇺🇸 52.203.216.101

🇮🇳 46.28.45.200

🇺🇸 20.172.240.136