JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.153

104.207.59.153 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.153

Whois 104.207.59.153

IP Abuse Reports for 104.207.59.153:

This IP address has been reported a total of 103 times from 11 distinct sources. 104.207.59.153 was first reported on June 7th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-05-19 21:18:22 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:59:02 (2 weeks ago)	MatShield L7: blocked on dstat.selify.io (click-id-direct-nav)	DDoS Attack
🇫🇷 MatStef132	2026-05-19 20:55:42 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-15 13:30:00 (3 weeks ago)	MatShield L7 blocked request to fivemtest.mathost.eu for reason ua-q	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-05-14 22:03:11 (3 weeks ago)	MatShield L7 blocked request to mathost.eu for reason ua-q	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-05-14 21:32:37 (3 weeks ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-04-28 15:44:20 (1 month ago)	Cloudflare WAF: Request Path: /123456 Request Query: ?source=BH0hnAqGhCMHsp Host: elhacker.net userA ... show more Cloudflare WAF: Request Path: /123456 Request Query: ?source=BH0hnAqGhCMHsp Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: block Source: ratelimit ASN Description: 3xK Tech GmbH Country: CA Method: GET Timestamp: 2026-04-28T15:44:20Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇫🇷 ✨	2026-04-03 00:06:48 (2 months ago)	Domain : stephenminett.co.uk Rule : DangerQueryString 2026-04-03 00:03:46 *hidden-privacy* GET / ... show more Domain : stephenminett.co.uk Rule : DangerQueryString 2026-04-03 00:03:46 *hidden-privacy* GET /client_galleries/samantha-and-ashley-wedding-vaulty-manon/index.php keyWord=' show less	Web App Attack
🇱🇻 garmtech.com	2026-03-14 23:16:04 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2026-01-05 20:17:24 (5 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.05 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:21:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:21:00.001049 2025] [security2:error] [pid 22787:tid 22787] [client 104.207.59.153:28443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.amurtel.org"] [uri "/.svn/wc.db"] [unique_id "aSQVbP8qeWJvTKDOKGOARgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:50:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:50:11.157777 2025] [security2:error] [pid 16336:tid 16336] [client 104.207.59.153:43485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mindforestmovie.com"] [uri "/.git/HEAD"] [unique_id "aSQOM_7TXtthC_nKgECTBQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:32:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:32:54.559017 2025] [security2:error] [pid 3965136:tid 3965162] [client 104.207.59.153:17933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barneysprecision.com"] [uri "/.env"] [unique_id "aSPuBjGAQlEvBxWyTv_MnwAAAZg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-11 07:58:33 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 20:08:45 (7 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 103.85.174.162

🇵🇱 87.251.64.144

🇨🇳 81.71.96.41

🇺🇸 64.62.197.194

🇿🇲 41.63.62.103

🇺🇸 3.142.170.60

🇺🇸 216.180.246.199

🇹🇼 198.235.24.95

🇨🇳 180.184.86.82

🇭🇰 154.92.17.30

🇸🇬 152.42.240.74

🇹🇭 118.172.28.103

🇹🇼 101.13.4.119

🇱🇹 91.224.92.32

🇺🇸 68.220.171.40

🇺🇸 66.132.186.234

🇹🇼 60.199.224.2

🇩🇪 35.246.216.80

🇺🇸 34.96.63.38

🇯🇵 8.216.6.133