JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.161

104.207.58.161 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.161

Whois 104.207.58.161

IP Abuse Reports for 104.207.58.161:

This IP address has been reported a total of 137 times from 14 distinct sources. 104.207.58.161 was first reported on June 3rd 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-14 04:58:32 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-58.104.207.58.161.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-58.104.207.58.161.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-14 02:54:44 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-54.104.207.58.161.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-54.104.207.58.161.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-13 21:09:32 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-09.104.207.58.161.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-09.104.207.58.161.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-08 05:57:06 (4 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-57.104.207.58.161.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-57.104.207.58.161.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇫🇷 masterguru	2026-03-28 10:25:30 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.161 (TH/Thailand/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.161 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-03-15 17:01:21 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇵🇱 sefinek.net	2026-02-17 17:11:16 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:41 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇳 ThreatBook.io	2025-11-27 00:53:41 (6 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.58.161 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.58.161 2025-11-26 19:51:27 /.env show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:20:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:20:49.680200 2025] [security2:error] [pid 26770:tid 26892] [client 104.207.58.161:14263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ar.xavidominguez.com"] [uri "/.svn/wc.db"] [unique_id "aSbUgaYYBb1oBezR6MaV1wAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:01:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:01:08.718368 2025] [security2:error] [pid 14423:tid 14423] [client 104.207.58.161:26077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kirt.us"] [uri "/.env"] [unique_id "aSbB1NncYUFA__naP020JgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:19:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:19:03.271801 2025] [security2:error] [pid 21736:tid 21736] [client 104.207.58.161:26945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.my-spec.com"] [uri "/.git/HEAD"] [unique_id "aSap56Tgl3nF4JqnMAgm-gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:04:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:04:11.346819 2025] [security2:error] [pid 13788:tid 13788] [client 104.207.58.161:43763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ruthmartin.org"] [uri "/.git/HEAD"] [unique_id "aSZuKzdr3VhS9VSWqwdpRQAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:11:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:11:34.093566 2025] [security2:error] [pid 25410:tid 25410] [client 104.207.58.161:60963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.deepseasugar.com"] [uri "/.svn/wc.db"] [unique_id "aSZTxitTZbn7KA-RUkaJ6AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:11:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:11:03.721700 2025] [security2:error] [pid 32003:tid 32027] [client 104.207.58.161:36463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.brydansales.com"] [uri "/.env"] [unique_id "aSZFlzKMur_mjuXzQQ86agAAARY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 156.255.1.208

🇨🇳 218.92.201.254

🇩🇪 213.209.159.241

🇹🇳 197.26.140.62

🇧🇷 187.120.52.148

🇦🇷 181.199.152.251

🇽🇰 178.175.68.23

🇳🇱 93.123.109.127

🇮🇪 54.216.231.176

🇦🇴 41.222.202.170

🇷🇼 197.243.14.52

🇩🇪 194.88.98.122

🇲🇽 187.140.12.210

🇨🇳 180.164.154.171

🇨🇳 116.228.233.93

🇨🇳 101.67.138.53

🇹🇷 88.244.90.231

🇩🇪 213.209.159.56

🇮🇶 178.210.226.159

🇺🇸 172.236.126.127