JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.75

104.207.59.75 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.75

Whois 104.207.59.75

IP Abuse Reports for 104.207.59.75:

This IP address has been reported a total of 122 times from 11 distinct sources. 104.207.59.75 was first reported on June 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-14 22:58:39 (3 weeks ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.59.75 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.59.75 2026-05-14 22:23:50 /config/DataSetConfig%23.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-17 22:57:02 (1 month ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.59.7 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.59.75 2026-04-17 21:02:49 /v3/api-docs 2026-04-17 21:02:45 /prod-api/v2/api-docs 2026-04-17 21:02:46 /v2/api-docs 2026-04-17 21:02:49 /api/swagger.json 2026-04-17 21:02:46 /swagger/v1/swagger.json 2026-04-17 21:02:48 /swagger/docs/v1 show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-26 23:55:51 (2 months ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.59.75 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.59.75 2026-03-26 02:14:57 / show less	Web App Attack
Anonymous	2026-01-05 20:34:32 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇨🇳 ThreatBook.io	2025-12-07 23:59:05 (6 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.59.75 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.59.75 2025-12-07 06:18:52 / 2025-12-07 06:18:53 / 2025-12-07 06:18:30 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-04 23:58:44 (6 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.59.75 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.59.75 2025-12-04 08:54:14 /prod-api/v2/api-docs 2025-12-04 08:54:17 /v3/api-docs 2025-12-04 08:54:15 /swagger/v1/swagger.json 2025-12-04 08:54:15 /v2/api-docs 2025-12-04 08:54:16 /swagger/docs/v1 2025-12-04 08:54:16 /api/swagger.json 2025-12-04 21:02:59 /config/DataSetConfig%23.xml show less	Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-25 07:05:08 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 01:55:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:55:36.880198 2025] [security2:error] [pid 31244:tid 31244] [client 104.207.59.75:20799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coyotebytes.com"] [uri "/.git/HEAD"] [unique_id "aSUMmGmo9F6fPc7_2EyDXQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:27:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:50.373446 2025] [security2:error] [pid 28155:tid 28155] [client 104.207.59.75:32651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacktvnow.com"] [uri "/.env"] [unique_id "aSQlFmypiDFP2Q1gXjnM3QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:39:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:40.930788 2025] [security2:error] [pid 32699:tid 32699] [client 104.207.59.75:59991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beautyradio.com"] [uri "/.env"] [unique_id "aSQZVL4gxfMlVX9eMChNvQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:25:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:24:37.070983 2025] [security2:error] [pid 8785:tid 8785] [client 104.207.59.75:40031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.imaginationbyme.com"] [uri "/.svn/wc.db"] [unique_id "aSP6JQGsemdRKjjJhUY_VwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:09:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:09:51.428762 2025] [security2:error] [pid 16107:tid 16107] [client 104.207.59.75:35675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acmyles.com"] [uri "/.env"] [unique_id "aSPon-Y2Gh6nz_gB8s1YdgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-10-24 22:39:02 (7 months ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.59.7 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.59.75 2025-10-24 21:12:22 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2025-04-07 12:41:36 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 15:12:42 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.204

🇲🇽 187.140.10.49

🇩🇪 89.106.206.212

🇧🇷 201.77.124.248

🇫🇷 143.244.57.86

🇫🇷 91.231.89.91

🇸🇦 64.137.218.212

🇬🇧 2a06:4880:8000::a9

🇧🇴 181.115.172.20

🇰🇷 103.28.60.19

🇰🇪 102.204.4.4

🇷🇴 92.118.39.62

🇳🇱 45.148.10.151

🇸🇬 43.156.98.245

🇭🇰 113.252.169.16

🇻🇳 103.98.149.56

🇭🇰 103.20.223.56

🇫🇷 85.217.140.31

🇴🇲 85.154.20.234

🇺🇸 82.22.112.124