JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.147

104.207.58.147 was found in our database!

This IP was reported 140 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.147

Whois 104.207.58.147

IP Abuse Reports for 104.207.58.147:

This IP address has been reported a total of 140 times from 18 distinct sources. 104.207.58.147 was first reported on June 4th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-03-03 23:13:33 (3 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2026-02-25 19:00:59 (3 months ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 03:46:13 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:46:06.644999 2026] [security2:error] [pid 30047:tid 30047] [client 104.207.58.147:18139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcruickshank.com"] [uri "/.git/config"] [unique_id "aZU1_tm4Ru6FyyMceQepQQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:48:46 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:48:43.794769 2026] [security2:error] [pid 12773:tid 12773] [client 104.207.58.147:53863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulburns.com"] [uri "/v2/.git/config"] [unique_id "aZUMa_OMeqYUPwJ7SjVzggAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-02-17 16:49:16 (3 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2025-11-25 06:08:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:08:13.139683 2025] [security2:error] [pid 32753:tid 32753] [client 104.207.58.147:52735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sisix.net"] [uri "/.env"] [unique_id "aSVHzSoC28tXzBSmuVQywgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:07:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:07:42.115227 2025] [security2:error] [pid 21951:tid 21951] [client 104.207.58.147:49077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dougscomputers.com"] [uri "/.env"] [unique_id "aSUdfujPgfKODz76_v2AHAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2025-11-25 02:40:02 (6 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:37:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:37:41.583541 2025] [security2:error] [pid 6704:tid 6704] [client 104.207.58.147:57073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.beautifulnoise.com"] [uri "/.svn/wc.db"] [unique_id "aSUWdc1g-g_pvpEdON6BmwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:06:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:06:30.482637 2025] [security2:error] [pid 24785:tid 24785] [client 104.207.58.147:14159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jackpotclubcasinos.com"] [uri "/.git/HEAD"] [unique_id "aSUBFosvk-v3Lj87y2yp_gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-09 15:06:47 (6 months ago)	(From [email protected]) Howdy from SeoBests, Increase your website’s search engine rankin ... show more (From [email protected]) Howdy from SeoBests, Increase your website’s search engine rankings, expand your search visibility and generate powerful backlinks! Get the most effective SEO services all on one platform - SeoBests.com Check out current SEO promotions: 50% OFF Monthly SEO Backlinks + Receive 5000 Backlinks FOR FREE: https://tiny.cc/SeoBests-50Bonus Explore many SEO services, 100+ deals online, and top-tier experts. SeoBests.com - your best SEO services provider. show less	Phishing Web Spam
🇵🇱 sefinek.net	2025-11-09 14:32:56 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 applemooz	2025-11-01 11:15:43 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2025-10-19 18:18:06 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 20:20:47 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.18 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 217.14.62.11

🇺🇸 147.185.132.176

🇺🇸 136.107.230.109

🇺🇸 132.145.213.106

🇹🇼 111.70.49.182

🇳🇱 91.92.42.19

🇺🇸 34.136.180.220

🇮🇹 217.26.178.12

🇷🇴 143.244.54.29

🇷🇴 143.244.54.17

🇷🇴 143.244.54.11

🇨🇳 106.75.13.37

🇫🇷 91.231.89.237

🇮🇷 89.196.111.43

🇦🇲 82.199.197.245

🇺🇸 66.228.53.4

🇳🇱 45.148.10.200

🇧🇷 43.157.179.227

🇺🇸 35.227.9.132

🇩🇪 5.231.70.13