JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.193

104.207.58.193 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.193

Whois 104.207.58.193

IP Abuse Reports for 104.207.58.193:

This IP address has been reported a total of 128 times from 16 distinct sources. 104.207.58.193 was first reported on June 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-04-21 04:28:25 (1 month ago)	[TueApr2106:28:19.2613372026][security2:error][pid2428967:tid2428984][client104.207.58.193:0]ModSecu ... show more [TueApr2106:28:19.2613372026][security2:error][pid2428967:tid2428984][client104.207.58.193:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"casacarmen.ch\"][uri\"/mysql.sql\"][unique_id\"aeb841HR_2-JIdnTJ8T0fQAAAI4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 nowyouknow	2026-03-14 00:05:45 (3 months ago)	Dear Sir or Madam, I am writing to enquire about your product and would appreciate it if you coul ... show more Dear Sir or Madam, I am writing to enquire about your product and would appreciate it if you could provide further information, including pricing, specifications, and availability. Please also let me know if there are any brochures or additional details you can share. I look forward to your response. Kind regards, Veronica McKinney show less	Phishing Web Spam
🇺🇸 myagent.site	2026-01-20 21:47:50 (4 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2026-01-20 19:28:25 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 14:28:20.352384 2026] [security2:error] [pid 22574:tid 22574] [client 104.207.58.193:22661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "servecon.co"] [uri "/.git/HEAD"] [unique_id "aW_XVDHHiAUAWCSXqzI2jQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-12-14 14:20:04 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 12:24:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:24:52.676265 2025] [security2:error] [pid 11235:tid 11235] [client 104.207.58.193:51387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "businesscardclocks.com"] [uri "/.env"] [unique_id "aS7alGOU5mGTAXaTV7IH7AAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:15:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:14:58.198859 2025] [security2:error] [pid 2280:tid 2280] [client 104.207.58.193:60669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1writeforthegrant.com"] [uri "/.git/HEAD"] [unique_id "aS6gAnIktmPfPDgJlwQCxwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:35:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:35:24.836939 2025] [security2:error] [pid 11908:tid 11922] [client 104.207.58.193:47161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geegeefive.com"] [uri "/.env"] [unique_id "aS5sjMliGRBvMFEAm_wfoQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 01:26:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 20:26:03.235972 2025] [security2:error] [pid 22445:tid 22445] [client 104.207.58.193:21377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wurkroom.biz"] [uri "/.svn/wc.db"] [unique_id "aS5AKzBKQY-4cN1H0uY7pwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:07:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:07:47.694162 2025] [security2:error] [pid 18865:tid 18865] [client 104.207.58.193:30233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.glolady.com"] [uri "/.svn/wc.db"] [unique_id "aSP2M0M2jRtoJHPv7Z67GQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 20:31:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 15:31:01.992903 2025] [security2:error] [pid 32012:tid 32012] [client 104.207.58.193:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nyemdr.com"] [uri "/.env"] [unique_id "aReRhS3N4vW7zzDb_EIZjgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 ki3	2025-10-28 02:33:37 (7 months ago)	Fail2Ban: Web App Attacks and Forum Spam 104.207.58.193 1761618815.0(JST)	Web Spam Bad Web Bot Web App Attack
🇩🇪 cloudmax	2025-10-25 18:31:11 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇩🇪 cloudmax	2025-10-24 04:12:22 (7 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2025-04-07 07:59:02 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 190.89.31.31

🇱🇹 45.227.254.170

🇳🇱 193.25.217.247

🇵🇪 191.97.63.220

🇧🇷 187.45.135.82

🇳🇱 185.223.235.4

🇺🇸 174.64.199.92

🇩🇿 154.248.114.153

🇵🇰 110.38.247.155

🇮🇱 87.71.5.165

🇩🇪 37.221.198.200

🇮🇷 31.14.82.5

🇪🇹 196.189.155.89

🇺🇸 74.82.47.38

🇺🇸 66.132.172.241

🇽🇰 46.99.179.139

🇬🇷 5.55.68.152

🇺🇸 206.82.6.58

🇩🇪 194.88.98.101

🇨🇱 181.42.178.61