JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.127

104.207.58.127 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.127

Whois 104.207.58.127

IP Abuse Reports for 104.207.58.127:

This IP address has been reported a total of 137 times from 15 distinct sources. 104.207.58.127 was first reported on June 19th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-20 22:00:46 (3 weeks ago)	Auto-ban: >3000 req/min op 2026-05-20	Web App Attack SSH Hacking
🇩🇪 big-cloud.nl	2026-05-19 23:02:05 (3 weeks ago)	Try to access /.env	Web App Attack
🇬🇧 Smish	2026-04-28 10:00:28 (1 month ago)	HONEYPOT HIT --> Fail2ban time=1777370427 log=2026-04-28T11:00:27+01:00 ip=104.207.58.127 host=grafa ... show more HONEYPOT HIT --> Fail2ban time=1777370427 log=2026-04-28T11:00:27+01:00 ip=104.207.58.127 host=grafana.as210667.net method=GET uri="/.aws/credentials" status=404 ua="Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" ref="-" rid=45937e0557e4342f8f366a5b51a122e0 show less	Web App Attack
🇩🇪 big-cloud.nl	2026-04-27 16:32:44 (1 month ago)	Try to access /.aws/credentials	Web App Attack
🇨🇳 ThreatBook.io	2026-04-20 23:59:41 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/104.207.58.127 2026-04 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/104.207.58.127 2026-04-20 17:46:18 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-04 00:26:02 (2 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.58.127 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.58.127 2026-04-03 17:52:11 /config/DataSetConfig%23.xml show less	Web App Attack
🇫🇷 masterguru	2026-04-02 06:36:27 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.127 (TH/Thailand/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.127 (TH/Thailand/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇨🇳 ThreatBook.io	2026-04-02 00:15:32 (2 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.58.127 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.58.127 2026-04-01 14:19:26 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇫🇷 masterguru	2026-03-30 06:12:38 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.127 (TH/Thailand/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.127 (TH/Thailand/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2026-03-28 11:36:05 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇫🇷 masterguru	2026-03-25 18:19:23 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.127 (TH/Thailand/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.127 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-03-23 19:02:50 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 05:19:41 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:19:32.815230 2026] [security2:error] [pid 19722:tid 19722] [client 104.207.58.127:27805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kreweofblackbeardsrevenge.com"] [uri "/admin/.git/config"] [unique_id "aZadZKQePxEk6gd_HhULxwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 04:55:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:55:04.428457 2026] [security2:error] [pid 9792:tid 9792] [client 104.207.58.127:17379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konstantiasofokleous.com"] [uri "/app/.env"] [unique_id "aZaXqLIV_6m1VCwBZc3uCQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 04:22:19 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:22:12.111601 2026] [security2:error] [pid 25070:tid 25070] [client 104.207.58.127:21609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klingandi.com"] [uri "/.env.production"] [unique_id "aZaP9IMfUZKJPEHQfTuBEQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.206

🇧🇪 198.235.24.204

🇺🇸 172.93.106.153

🇳🇱 164.92.215.60

🇧🇴 38.246.59.32

🇪🇪 213.35.128.24

🇧🇷 205.210.31.131

🇳🇱 190.2.135.111

🇸🇦 188.55.84.41

🇬🇧 185.247.137.95

🇺🇸 172.234.199.75

🇫🇷 143.244.57.121

🇺🇸 107.174.213.186

🇺🇸 64.62.156.146

🇺🇸 2001:470:1:fb5::18e

🇧🇷 205.210.31.249

🇧🇪 198.235.24.174

🇲🇿 197.219.208.38

🇬🇧 178.62.75.226

🇰🇷 175.198.62.180