JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.46

104.207.59.46 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.46

Whois 104.207.59.46

IP Abuse Reports for 104.207.59.46:

This IP address has been reported a total of 162 times from 19 distinct sources. 104.207.59.46 was first reported on June 5th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 SaltySoftworks	2026-01-10 17:41:15 (4 months ago)	User agent spoofing Page: /.git/config/	Hacking Spoofing Web App Attack
Anonymous	2026-01-05 20:18:53 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-27 22:54:05 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 17:53:58.989692 2025] [security2:error] [pid 14579:tid 14579] [client 104.207.59.46:9037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawrencehale.com"] [uri "/.env"] [unique_id "aVBjhryn8eLSrzmKjGL0OwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 19:21:42 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:21:39.601953 2025] [security2:error] [pid 3246641:tid 3246641] [client 104.207.59.46:22345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidfiss.com"] [uri "/.svn/wc.db"] [unique_id "aVAxwyYA69FxykKA6WeB5wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 16:06:21 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 11:06:15.840218 2025] [security2:error] [pid 3920:tid 3920] [client 104.207.59.46:47139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidfortier.com"] [uri "/.svn/wc.db"] [unique_id "aVAD94ZcdJiN-S2ioAoV-QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-26 12:14:55 (5 months ago)	"GET /.svn/wc.db HTTP/1.1"	Hacking Web App Attack
🇧🇷 hostseries	2025-12-21 15:29:53 (5 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-12-21 12:58:08 (5 months ago)	Attempted brute force login to web vpn 198 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 198 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:45:31 (5 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-01 23:29:55 (6 months ago)	Attempted brute force login to web vpn 990 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 990 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 22:59:22 (6 months ago)	Attempted brute force login to web vpn 936 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 936 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 Gem	2025-11-28 23:12:28 (6 months ago)	Unauthorized web scan.	Web App Attack
Anonymous	2025-11-27 23:10:20 (6 months ago)	Attempted brute force login to web vpn 2564 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2564 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 22:13:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 17:13:10.183573 2025] [security2:error] [pid 10063:tid 10063] [client 104.207.59.46:50259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.artsafloat.com"] [uri "/.git/HEAD"] [unique_id "aSd7dg-JwhFLd26NkaYwjgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 21:28:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:28:02.799700 2025] [security2:error] [pid 4417:tid 4417] [client 104.207.59.46:30273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.solderhead.com"] [uri "/.env"] [unique_id "aSdw4pLjsJXa53StaSmdNgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.140

🇳🇱 176.65.149.50

🇳🇬 152.32.142.188

🇫🇷 89.116.35.97

🇨🇳 60.217.249.148

🇩🇪 213.209.159.56

🇷🇺 212.109.204.130

🇳🇱 185.93.89.147

🇺🇸 138.197.24.249

🇭🇰 107.150.119.136

🇭🇰 103.100.211.40

🇮🇳 103.21.58.190

🇺🇸 74.235.120.62

🇺🇸 64.62.197.2

🇸🇬 47.128.44.71

🇸🇬 2406:da18:125:f101:b307:1c60:afe6:6fbf

🇰🇷 222.119.187.182

🇨🇳 220.250.52.111

🇺🇸 216.25.89.75

🇨🇭 209.99.189.168