JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.4

104.207.59.4 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.4

Whois 104.207.59.4

IP Abuse Reports for 104.207.59.4:

This IP address has been reported a total of 81 times from 13 distinct sources. 104.207.59.4 was first reported on June 7th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-06-03 11:35:15 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
Anonymous	2026-01-05 20:26:46 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-21 11:22:48 (5 months ago)	Attempted brute force login to web vpn 270 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 270 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 17:29:14 (5 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-08 20:54:36 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 15:54:28.756626 2025] [security2:error] [pid 668:tid 668] [client 104.207.59.4:40489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trompelart.com"] [uri "/.git/HEAD"] [unique_id "aTc7BKSrbWmMLkQTC0sJuQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 16:53:33 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 11:53:28.382976 2025] [security2:error] [pid 13278:tid 13278] [client 104.207.59.4:9493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelcaico.com"] [uri "/.svn/wc.db"] [unique_id "aTcCiI78C1WhK7BxQSsvMAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 21:05:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 16:05:26.308732 2025] [security2:error] [pid 2994:tid 2994] [client 104.207.59.4:57667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "climasyequipos.com"] [uri "/.env"] [unique_id "aTXsFnAoexYZNR4Lftv9nQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 16:08:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 11:08:23.412547 2025] [security2:error] [pid 28311:tid 28311] [client 104.207.59.4:28635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "templegardens.org"] [uri "/.git/HEAD"] [unique_id "aTWmd0PF43ly7rH2G-U3dAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 13:20:09 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:20:01.342271 2025] [security2:error] [pid 22190:tid 22251] [client 104.207.59.4:51907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maritimeclinic.net"] [uri "/.env"] [unique_id "aTQtgd-puAKiYBSMkZD54wAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 06:37:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:36:58.170502 2025] [security2:error] [pid 26627:tid 26627] [client 104.207.59.4:30621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysticalparadise.com"] [uri "/.env"] [unique_id "aTJ9ik-AUklXwfeEsR5RHAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 05:53:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:53:48.279958 2025] [security2:error] [pid 21726:tid 21726] [client 104.207.59.4:45151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starktigers75.com"] [uri "/.git/HEAD"] [unique_id "aTJzbILH5VfvNdJ_dxCOmQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 03:35:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:35:21.675767 2025] [security2:error] [pid 22025:tid 22032] [client 104.207.59.4:39821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dermatologycolorado.com"] [uri "/.svn/wc.db"] [unique_id "aTJS-SpQjrIi2yoEU1Sr6wAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 00:57:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:56:57.953615 2025] [security2:error] [pid 6105:tid 6105] [client 104.207.59.4:35341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liftreading.com"] [uri "/.svn/wc.db"] [unique_id "aTIt2VN20n9x7X69Wl2_vwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-11 08:07:19 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 23:16:53 (7 months ago)	Attempted brute force login to web vpn 234 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 234 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.177.0.172

🇨🇳 112.123.185.126

🇷🇴 80.94.92.171

🇮🇹 2001:b07:646d:86d8:8991:fc33:b8d5:b64e

🇳🇱 185.223.235.34

🇵🇰 110.38.234.222

🇮🇹 93.92.78.91

🇺🇸 54.241.194.134

🇳🇱 45.148.10.151

🇪🇹 196.188.116.56

🇧🇷 177.55.176.66

🇱🇹 81.30.98.44

🇨🇲 41.211.126.210

🇮🇱 176.229.210.160

🇺🇸 143.198.122.236

🇸🇬 118.139.164.171

🇰🇷 14.36.38.211

🇨🇴 8.243.166.66

🇺🇸 54.226.36.72

🇧🇯 41.79.219.76