JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

74.208.59.39

Activity Trending Down

Abuse Confidence Score

16% Caution

53 reports

25 reporters · latest 1 month ago

ISP: IONOS Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8560
Hostname(s): infong1597.perfora.net
Domain Name: ionos.com
Country: 🇺🇸 United States of America
City: Lenexa, Kansas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

53 from 25 distinct reporters

First reported

October 7th 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇮🇹 Italy 1 🇳🇱 Netherlands 1

Most common categories Web App Attack 8 Bad Web Bot 6 Brute-Force 5 Port Scan 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 cnaize	2026-09-25 06:51:52 UTC · (1 month ago)	Malicious activity blocked by Meds firewall	Port Scan
🇺🇸 TPI-Abuse	2026-09-25 05:37:38 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:37:30.486831 2026] [security2:error] [pid 127581:tid 127581] [client ... show more (mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:37:30.486831 2026] [security2:error] [pid 127581:tid 127581] [client 74.208.59.39:59252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calfirstrealty.net"] [uri "/.env"] [unique_id "arYImnsYNK7eCvVobwyzNwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-22 23:56:25 UTC · (1 month ago)	[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 74.208.59.39 - - [23/Sep/2026:01:56:25 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 549 "-" "-" ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 21:08:42 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:08:37.017814 2026] [security2:error] [pid 6051:tid 6051] [client 74.2 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:08:37.017814 2026] [security2:error] [pid 6051:tid 6051] [client 74.208.59.39:46304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stevescottcoaching.com"] [uri "/wp-config.php.bak"] [unique_id "arLuVchFPiYQpx_k7DRG2AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 20:40:44 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:40:37.017614 2026] [security2:error] [pid 15226:tid 15226] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:40:37.017614 2026] [security2:error] [pid 15226:tid 15226] [client 74.208.59.39:50100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atomicmc.com"] [uri "/wp-config.php.bak"] [unique_id "arLnxdHyOrfKk5jtvbCwlQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 16:26:52 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:26:48.528023 2026] [security2:error] [pid 10506:tid 10506] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:26:48.528023 2026] [security2:error] [pid 10506:tid 10506] [client 74.208.59.39:60482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disloyalunion.com"] [uri "/wp-config.php.bak"] [unique_id "arKsSOZiRGuPg4YRTGj2cgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 15:54:05 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:53:58.033873 2026] [security2:error] [pid 25863:tid 25863] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:53:58.033873 2026] [security2:error] [pid 25863:tid 25863] [client 74.208.59.39:50806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/wp-config.php.bak"] [unique_id "arKklhx7n98vqGn1BeE8rgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-22 08:31:51 UTC · (1 month ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇮🇹 CoreTech srl	2026-09-22 03:18:59 UTC · (1 month ago)	cloudlinux2 fail2ban: 2026-09-22 05:14:23,685 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 213.199.36.240 - 2026-09-22 05:14:23cloudlinux2 fail2ban: 2026-09-22 05:15:01,089 fail2ban.filter [1598]: INFO [plesk-apache] Fou ... show more cloudlinux2 fail2ban: 2026-09-22 05:14:23,685 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 213.199.36.240 - 2026-09-22 05:14:23cloudlinux2 fail2ban: 2026-09-22 05:15:01,089 fail2ban.filter [1598]: INFO [plesk-apache] Found 35.244.49.211 - 2026-09-22 05:15:01cloudlinux2 fail2ban: 2026-09-22 05:15:01,056 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.244.49.211 - 2026-09-22 05:15:01cloudlinux2 fail2ban: 2026-09-22 05:15:01,068 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.244.49.211 - 2026-09-22 05:15:01cloudlinux2 fail2ban: 2026-09-22 05:15:58,257 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 160.179.152.200 - 2026-09-22 05:15:57cloudlinux2 fail2ban: 2026-09-22 05:15:58,264 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 160.179.152.200 - 2026-09-22 05:15:58cloudlinux2 fail2ban: 2026-09-22 05:15:58,115 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 136.144.33.55 - 2026-09-22 05:15:5 show less	Web App Attack
🇮🇹 Progetto1	2025-08-16 16:31:02 UTC · (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇦🇹 René Hickersberger	2025-08-14 19:05:39 UTC · (1 year ago)	[2025-08-14T19:05:39Z] Malicious request to /wordpress.zip	Hacking Bad Web Bot Web App Attack
🇩🇪 Mr-Money	2025-07-22 08:18:50 UTC · (1 year ago)	74.208.59.39 - - [22/Jul/2025:10:18:50 +0200] "HEAD /old.zip HTTP/1.1" 301 198 "-" "-" ...	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 SiliSoftware	2025-07-20 21:37:46 UTC · (1 year ago)	/web.zip	Web App Attack
🇺🇸 TPI-Abuse	2025-07-20 10:30:33 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 06:30:29.701602 2025] [security2:error] [pid 13283:tid 13283] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.59.39 (infong1597.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 06:30:29.701602 2025] [security2:error] [pid 13283:tid 13283] [client 74.208.59.39:45968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corstratinc.com"] [uri "/wp-config.php_old"] [unique_id "aHzFRej3GFUsy1niXNfTlQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-07-19 14:00:20 UTC · (1 year ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 162.158.103.180

🇵🇱 162.158.103.132

🇵🇱 2400:cb00:73:1000:7c67:d0a7:3359:5eec

🇳🇱 192.253.248.222

🇵🇱 109.205.211.137

🇳🇱 109.160.32.118

🇻🇳 103.139.45.158

🇺🇸 100.11.13.166

🇩🇪 94.26.41.221

🇺🇸 73.21.168.93

🇩🇪 69.5.169.171

🇫🇷 51.178.198.121

🇧🇷 45.174.239.52

🇩🇪 31.25.11.143

🇷🇴 2.57.122.168

🇳🇱 213.209.159.175

🇬🇧 209.97.128.111

🇬🇧 195.206.182.221

🇺🇸 162.216.149.191

🇩🇪 141.11.36.206