JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.148

104.207.58.148 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.148

Whois 104.207.58.148

IP Abuse Reports for 104.207.58.148:

This IP address has been reported a total of 123 times from 15 distinct sources. 104.207.58.148 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 10dencehispahard SL	2026-01-26 07:46:33 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇮🇹 VHosting	2026-01-06 00:50:09 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇦🇹 Markus Woegerbauer	2026-01-05 19:56:37 (5 months ago)	(mod_security) mod_security triggered on hostname [redacted] 104.207.58.148 (TH/Thailand/-)	SQL Injection
🇺🇸 TPI-Abuse	2025-12-02 22:55:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:55:15.152268 2025] [security2:error] [pid 7999:tid 7999] [client 104.207.58.148:55063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desarrollosdecolima.com"] [uri "/.git/HEAD"] [unique_id "aS9uU0S7dMO70DkTVbnAWQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 20:54:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:54:26.409275 2025] [security2:error] [pid 3919:tid 3919] [client 104.207.58.148:45951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "farmers123.com"] [uri "/.git/HEAD"] [unique_id "aS9SAlkqRJCTeFfUOlquvwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 07:36:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:36:51.324149 2025] [security2:error] [pid 18809:tid 18809] [client 104.207.58.148:46023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azcrittergetter.com"] [uri "/.git/HEAD"] [unique_id "aS6XE2DiGK8BJZWuknxTLAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:51:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:51:33.433955 2025] [security2:error] [pid 20609:tid 20609] [client 104.207.58.148:37693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misfitranch.com"] [uri "/.svn/wc.db"] [unique_id "aS5-ZTyAHM5NSYAxhzIH4wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-02 01:08:19 (6 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-11-14 23:02:10 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-10-11 06:33:16 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 23:58:45 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 11:37:48 (7 months ago)	Attempted brute force login to web vpn 89 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 89 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 18:59:23 (7 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 23:25:23 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 03:00:04 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 134.209.230.13

🇻🇳 103.77.242.62

🇰🇪 102.0.13.126

🇺🇸 40.90.234.147

🇺🇸 162.216.149.163

🇩🇪 138.68.65.59

🇬🇧 138.2.249.113

🇨🇳 120.193.9.169

🇨🇳 106.12.76.61

🇺🇸 64.62.156.66

🇺🇸 24.144.116.101

🇺🇸 20.163.2.151

🇩🇪 5.231.242.167

🇨🇳 180.184.182.87

🇻🇳 118.70.182.193

🇫🇮 77.83.24.79

🇩🇪 64.89.163.51

🇨🇳 54.223.254.138

🇩🇪 54.37.74.179

🇺🇸 192.241.141.178