JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.249

104.207.59.249 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.249

Whois 104.207.59.249

IP Abuse Reports for 104.207.59.249:

This IP address has been reported a total of 149 times from 28 distinct sources. 104.207.59.249 was first reported on June 6th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-08-23 11:43:10 (2 days ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-07-29 00:14:48 (3 weeks ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-06-24 03:22:26 (2 months ago)	Brute force	Brute-Force
🇺🇸 webgobe	2026-06-03 17:52:33 (2 months ago)	wew-Joomla User : try to access forms...	Hacking
🇬🇧 PeravixGroup	2026-05-09 04:04:20 (3 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇪🇸 10dencehispahard SL	2026-01-26 07:47:35 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇵🇱 sefinek.net	2026-01-21 08:30:24 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:09 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 05:58:41 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:58:36.685144 2025] [security2:error] [pid 3633:tid 3633] [client 104.207.59.249:46435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohiobabe.com"] [uri "/.svn/wc.db"] [unique_id "aVIYjIX02irtcpJUJWudOwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 venus.launch.bz	2025-12-29 05:42:51 (7 months ago)	(wpscan) WordPress probe detected from 104.207.59.249 (CA/Canada/-)	Hacking
🇺🇸 TPI-Abuse	2025-12-29 04:38:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:38:21.454000 2025] [security2:error] [pid 21140:tid 21140] [client 104.207.59.249:41443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schrankhome.com"] [uri "/.env"] [unique_id "aVIFvQaYxVvJSI4LhmVdbwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:00:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:00:53.837171 2025] [security2:error] [pid 9643:tid 9643] [client 104.207.59.249:15173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vabq.com"] [uri "/.env"] [unique_id "aVH89eYCj6ry8i2OaEBDPwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRNP	2025-12-29 02:39:02 (7 months ago)	_:80 104.207.59.249 - - [29/Dec/2025:02:39:02 +0000] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 ( ... show more _:80 104.207.59.249 - - [29/Dec/2025:02:39:02 +0000] "GET /.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 rh24	2025-12-06 20:43:53 (8 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.207.59.249 (CA/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.207.59.249 (CA/Canada/-) show less	Bad Web Bot
🇺🇸 nowyouknow	2025-12-04 12:25:51 (8 months ago)	(From [email protected]) Skyrocket your search engine rankings, improve your search visib ... show more (From [email protected]) Skyrocket your search engine rankings, improve your search visibility and gain powerful backlinks! BonusBacklinks.com - we build daily backlinks and drive website traffic to your page EVERY DAY: + Take 85% DISCOUNT + Strong daily seo backlinks + Real website visits + Prices as low as $1 + Bonus coupon codes Explore backlinks discounts - https://tiny.cc/BonusBacklinks-Discount Or view directly - https://BonusBacklinks.com BonusBacklinks - daily seo backlinks and website traffic to boost your site every day show less	Phishing Web Spam

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.111.183.254

🇨🇳 171.113.134.55

🇲🇽 158.23.147.79

🇺🇸 136.124.34.189

🇵🇰 103.82.121.85

🇷🇺 95.172.56.39

🇳🇱 93.123.109.228

🇺🇸 66.132.195.69

🇨🇳 8.152.214.41

🇺🇸 172.68.175.8

🇺🇸 162.83.229.191

🇧🇷 45.70.164.151

🇩🇪 31.70.84.142

🇧🇷 191.30.87.161

🇺🇸 162.216.150.54

🇺🇸 162.216.149.103

🇻🇳 14.161.203.193

🇷🇴 2.57.122.53

🇻🇳 222.252.158.68

🇩🇪 212.227.188.160