JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.194

104.207.59.194 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.194

Whois 104.207.59.194

IP Abuse Reports for 104.207.59.194:

This IP address has been reported a total of 126 times from 15 distinct sources. 104.207.59.194 was first reported on June 4th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-05-23 05:06:09 (3 weeks ago)		Bad Web Bot
🇫🇮 as211431.net	2026-05-06 01:29:11 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /results/.env UA: curl/8.7.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-01-04 04:03:39 (5 months ago)	Brute force	Brute-Force
🇩🇪 stinpriza	2025-12-26 03:32:43 (5 months ago)	Web App Attack	Web App Attack
Anonymous	2025-12-21 13:17:01 (5 months ago)	Attempted brute force login to web vpn 198 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 198 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:42:15 (5 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 02:45:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:45:05.790434 2025] [security2:error] [pid 24542:tid 24542] [client 104.207.59.194:42229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.theyoungstrategist.com"] [uri "/.env"] [unique_id "aSUYMRHVVnF9oYlHRbzv5wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:26:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:26:26.872668 2025] [security2:error] [pid 13808:tid 13808] [client 104.207.59.194:12235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pbeyer.org"] [uri "/.svn/wc.db"] [unique_id "aSUT0icJIxqDXVlbknnCcAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:46:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:46:50.002753 2025] [security2:error] [pid 3002:tid 3002] [client 104.207.59.194:16085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chitsey.com"] [uri "/.svn/wc.db"] [unique_id "aSUKigWbIKQ6fU495j6YaQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:04:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:04:35.565215 2025] [security2:error] [pid 1416453:tid 1416527] [client 104.207.59.194:12959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gapm.aafm.us"] [uri "/.git/HEAD"] [unique_id "aSTyk03b9nF_ETk_Bja3vgAAAlA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-10 18:32:02 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.59.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 14:31:54.512023 2025] [security2:error] [pid 11609:tid 11804] [client 104.207.59.194:42521] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pixelpushersdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOlRGuBKa7B7N4tMpjwl_AAAAMI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-06 01:28:57 (8 months ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-04-06 19:56:26 (1 year ago)	Attempted brute force login to web vpn 10 time(s); last attempt for 2025.04.06 is noted in report ti ... show more Attempted brute force login to web vpn 10 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 02:58:03 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 11:17:18 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.241.136.95

🇨🇳 182.54.23.213

🇩🇪 176.65.132.129

🇺🇸 172.234.218.22

🇺🇸 157.245.114.249

🇺🇸 91.230.168.212

🇮🇳 223.237.26.252

🇰🇷 175.207.189.218

🇻🇳 113.177.27.200

🇩🇿 105.101.209.146

🇩🇪 92.209.172.72

🇰🇬 91.247.59.93

🇳🇱 91.92.40.12

🇩🇪 85.215.45.9

🇳🇱 45.148.10.141

🇺🇸 40.77.167.49

🇰🇷 211.223.107.86

🇺🇾 186.53.99.188

🇮🇩 182.8.225.133

🇻🇳 171.246.124.211