JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.43.58

104.207.43.58 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.43.58

Whois 104.207.43.58

IP Abuse Reports for 104.207.43.58:

This IP address has been reported a total of 143 times from 19 distinct sources. 104.207.43.58 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-04-02 20:22:12 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.43.58 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.43.58 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-02 06:36:19 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.43.58 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.43.58 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-03-23 20:18:25 (2 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-18 00:52:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:52:50.624064 2026] [security2:error] [pid 1504133:tid 1504133] [client 104.207.43.58:14921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pawlewicz.org"] [uri "/api/.env"] [unique_id "aZUNYtZKme1OJkfQNqpXOwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-16 13:48:10 (3 months ago)	Forum/form spam	Web Spam
🇪🇸 10dencehispahard SL	2026-01-16 08:06:55 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-15 08:53:14 (4 months ago)	Forum/form spam	Web Spam
Anonymous	2025-12-04 03:49:17 (6 months ago)	botnet	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:55 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 06:23:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:23:05.963286 2025] [security2:error] [pid 12382:tid 12382] [client 104.207.43.58:60077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.areafinancieratf.com"] [uri "/.env"] [unique_id "aSVLSedLh4k4D2mlRKK1lgAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:54:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:54:27.987015 2025] [security2:error] [pid 28425:tid 28425] [client 104.207.43.58:34953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wedeliverstrippers.com"] [uri "/.svn/wc.db"] [unique_id "aSUaY1rWB92Tpm8hBOTGpgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:18:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.43.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:18:45.646449 2025] [security2:error] [pid 1343:tid 1343] [client 104.207.43.58:26467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alccontractorsllc.com"] [uri "/.svn/wc.db"] [unique_id "aST15RYnRoW5N8Fow5Q5qgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 07:42:21 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 fbarela	2025-11-08 04:00:28 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 nowyouknow	2025-10-25 22:34:07 (7 months ago)	(From [email protected]) Hi, I visited your page castelluccichiropractic.com. I noticed you h ... show more (From [email protected]) Hi, I visited your page castelluccichiropractic.com. I noticed you have fewer reviews than your competitors. We offer a free review software to get systematically reviews from your own clients. We also filter bad reviews and protect your reputation. no creditcard no costs explainervideo of 2 minutes here: https://www.loom.com/share/1a014edd2f7948788694adae8fda40d6 If you do not want to receive further emails just send us "unsubscribe" to the following emailadress: [email protected] show less	Phishing Web Spam

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.126.87.236

🇧🇪 207.175.12.159

🇲🇽 187.190.35.163

🇲🇾 115.135.30.214

🇺🇸 103.144.28.85

🇺🇸 82.197.83.76

🇬🇧 81.153.170.203

🇭🇰 43.155.40.91

🇧🇷 43.135.199.248

🇨🇳 14.18.122.240

🇹🇼 220.128.221.64

🇩🇪 213.209.159.241

🇧🇷 189.50.142.78

🇨🇳 180.169.100.182

🇬🇧 165.154.129.188

🇹🇭 125.24.176.135

🇰🇷 121.185.78.234

🇨🇳 120.48.90.166

🇧🇩 103.86.198.162

🇩🇪 69.5.169.30