JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.5

104.207.59.5 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.5

Whois 104.207.59.5

IP Abuse Reports for 104.207.59.5:

This IP address has been reported a total of 68 times from 10 distinct sources. 104.207.59.5 was first reported on June 5th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 10dencehispahard SL	2025-12-29 09:20:42 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-12-21 10:39:24 (6 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 21:46:41 (6 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-04 08:04:39 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-24 04:57:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:57:50.461974 2025] [security2:error] [pid 20346:tid 20346] [client 104.207.59.5:28767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aallred.com"] [uri "/.svn/wc.db"] [unique_id "aSPlzkx5gQwIht0p077JTwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:13:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:13:28.246113 2025] [security2:error] [pid 15794:tid 15818] [client 104.207.59.5:42297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stratifiedstudios.com"] [uri "/.env"] [unique_id "aSPbaE33WdBY9AO05A3xYgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 02:41:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:41:08.746067 2025] [security2:error] [pid 21950:tid 21950] [client 104.207.59.5:42209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.catchawaveformolly.com"] [uri "/.env"] [unique_id "aSPFxA0xQMBP5qGi1Ha4YgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 03:09:30 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 22:09:27.031740 2025] [security2:error] [pid 7895:tid 7895] [client 104.207.59.5:40059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ramoundos.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRadZ2lVwEdA0PSEz2aMRAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-10 21:04:03 (7 months ago)	2025-11-10T23:04:02.816072+02:00 zanati wp(www.sahpa.co.za)[2464613]: Blocked authentication attempt ... show more 2025-11-10T23:04:02.816072+02:00 zanati wp(www.sahpa.co.za)[2464613]: Blocked authentication attempt for [email protected] from 104.207.59.5 ... show less	Web App Attack
Anonymous	2025-04-07 01:06:55 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 22:08:42 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 08:59:53 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 20:38:43 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 22:53:10 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-01 22:52:56 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.01 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.01 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.8

🇩🇪 185.242.3.226

🇨🇳 121.237.180.222

🇺🇸 104.234.53.56

🇺🇸 66.132.195.18

🇺🇸 34.106.208.15

🇬🇧 193.163.125.114

🇩🇴 190.167.237.191

🇮🇳 154.221.35.72

🇭🇰 118.193.39.103

🇬🇧 86.154.46.100

🇺🇸 66.132.195.79

🇷🇺 37.79.255.104

🇨🇳 27.155.120.135

🇧🇩 203.190.8.240

🇷🇺 90.150.93.138

🇮🇹 83.229.8.197

🇺🇸 59.152.127.167

🇷🇴 2.57.122.202

🇩🇪 213.209.159.235