This IP address has been reported a total of
140
times from
44 distinct
sources.
104.36.50.59 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unauthorized VPN login attempts: 1 attempts were recorded from 104.36.50.59
2026-10-17T13:04:50+0200 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 104.36.50.59
2026-10-17T13:04:50+0200 vpn Access-Reject station: 104.36.50.59
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 104.36.50.59
2026-10-14T17:47:50+0200 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 104.36.50.59
2026-10-14T17:47:50+0200 vpn Access-Reject station: 104.36.50.59
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 104.36.50.59
2026-10-14T17:47:50+02:0 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 104.36.50.59
2026-10-14T17:47:50+02:00 vpn Access-Reject 'copier' station: 104.36.50.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
2x HTTP 403 to krynox.dev from US, method GET, path /favicon.ico. Blocked by Cloudflare action block ...
show more2x HTTP 403 to krynox.dev from US, method GET, path /favicon.ico. Blocked by Cloudflare action block (firewallCustom). Repeated L7 flood traffic.
show less
Sophos XGS VPN portal credential stuffing: 12 failed authentication attempts across 6 distinct usern ...
show moreSophos XGS VPN portal credential stuffing: 12 failed authentication attempts across 6 distinct usernames over 4 separate days since 2026-10-06. Low-and-slow distributed attack.
show less