JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.228

104.207.58.228 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 50%: ?

50%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.228

Whois 104.207.58.228

IP Abuse Reports for 104.207.58.228:

This IP address has been reported a total of 139 times from 25 distinct sources. 104.207.58.228 was first reported on June 8th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-09-18 06:21:17 (1 day ago)	Unauthorized VPN login attempts: 4 attempts were recorded from 104.207.58.228 2026-09-18T07:03:05+02 ... show more Unauthorized VPN login attempts: 4 attempts were recorded from 104.207.58.228 2026-09-18T07:03:05+02:00 vpn Access-Reject 'joice' station: 104.207.58.228 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-18T07:04:42+02:00 vpn Access-Reject 'andre' station: 104.207.58.228 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-18T07:06:19+02:00 vpn Access-Reject 'gustavo' station: 104.207.58.228 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-18T07:08:03+02:00 vpn Access-Reject 'flavio' station: 104.207.58.228 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇩🇪 4server	2026-09-13 18:52:03 (6 days ago)	[SunSep1320:51:59.7216522026][security2:error][pid770188:tid770317][client104.207.58.228:0]ModSecuri ... show more [SunSep1320:51:59.7216522026][security2:error][pid770188:tid770317][client104.207.58.228:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"autodiscover.atelier-lara.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqbwz8hZPWkWxFWzBDuy1gAAARA\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 spamverify.com	2026-09-13 16:14:04 (6 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-09-11 21:16:03 (1 week ago)	Wordfence waf block on fairregistry	Web App Attack
🇬🇧 Bytemark	2026-09-09 16:41:06 (1 week ago)	104.207.58.228 - - [09/Sep/2026:17:41:03 +0100] "GET /wp-login.php HTTP/1.1" 301 6753 "-" "Mozilla/5 ... show more 104.207.58.228 - - [09/Sep/2026:17:41:03 +0100] "GET /wp-login.php HTTP/1.1" 301 6753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 104.207.58.228 - - [09/Sep/2026:17:41:05 +0100] "GET /wp-login.php HTTP/1.1" 301 6886 "https://distancelearningcentre.biz/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 104.207.58.228 - - [09/Sep/2026:17:41:06 +0100] "GET /wp-login.php HTTP/1.1" 404 6643 "https://distancelearningcentre.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 ambor	2026-09-04 20:50:02 (2 weeks ago)	Honeypot triggered: /wp-login.php on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ... show more Honeypot triggered: /wp-login.php on ifebridge.com. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15. Method: POST show less	Web App Attack
🇫🇷 Sklurk	2026-09-01 02:30:25 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-26 17:19:03 (3 weeks ago)	[26/Aug/2026:20:19:03 +0300] -- 104.207.58.228 Ban reason: Scanner [CMS_GENERIC] \| Request: GET http ... show more [26/Aug/2026:20:19:03 +0300] -- 104.207.58.228 Ban reason: Scanner [CMS_GENERIC] \| Request: GET http://visnyk-pedagogy.knlu.edu.ua/wp-sitemap.xml HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-08-26 09:41:44 (3 weeks ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇳🇱 thedreamer.nl	2026-08-08 19:06:09 (1 month ago)	104.207.58.228 - - [08/Aug/2026:21:05:09 +0200] "GET /.git/objects/ef/182529510fd2cc884700976148a31b ... show more 104.207.58.228 - - [08/Aug/2026:21:05:09 +0200] "GET /.git/objects/ef/182529510fd2cc884700976148a31b2aa340c3 HTTP/1.1" 200 878 "-" "git/2.40.0" "TH" "Bangkok" "13.75510" "100.50570" 104.207.58.228 - - [08/Aug/2026:21:05:09 +0200] "GET /.git/objects/66/2a50b602805ad5ef8aa15e07c241163bb7fceb HTTP/1.1" 200 877 "-" "git/2.40.0" "TH" "Bangkok" "13.75510" "100.50570" 104.207.58.228 - - [08/Aug/2026:21:05:09 +0200] "GET /.git/objects/9c/99a1a9c1697823505f70d7c48ca9c8c1c94480 HTTP/1.1" 200 615 "-" "git/2.40.0" "TH" "Bangkok" "13.75510" "100.50570" 104.207.58.228 - - [08/Aug/2026:21:05:09 +0200] "GET /.git/objects/fc/828f2f159ed3879190b6c9dd3e04458a750560 HTTP/1.1" 200 1118 "-" "git/2.40.0" "TH" "Bangkok" "13.75510" "100.50570" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-08-01 01:27:32 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 00:13:57 (1 month ago)	Web App Attack	Web App Attack
🇪🇸 pipeline.es	2026-06-06 11:20:53 (3 months ago)	Web scanning / probing for vulnerable paths	Port Scan Web App Attack
🇪🇸 pipeline.es	2026-06-06 10:15:16 (3 months ago)	Web scanning / probing for vulnerable paths \| URL: http://travels-factory.traveltool.es:80//media/wp ... show more Web scanning / probing for vulnerable paths \| URL: http://travels-factory.traveltool.es:80//media/wp-includes/wlwmanifest.xml \| Evidence: landingow.aavv.com 104.207.58.228 - - [06/Jun/2026:12:14:11 +0200] \"GET http://travels-factory.traveltool.es:80//media/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 231 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36\" GEOIP_COUNTRY_CODE=TH \| ASN: 3xK Tech GmbH \| Country: TH show less	Port Scan Web App Attack
🇧🇪 cmbplf	2026-03-12 22:47:54 (6 months ago)	3.003 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 114.35.75.12

🇨🇳 112.22.116.166

🇮🇳 106.201.237.208

🇺🇸 66.249.73.1

🇲🇾 49.125.203.165

🇺🇸 20.9.36.57

🇵🇱 212.105.131.65

🇸🇬 212.73.148.8

🇮🇳 172.83.83.194

🇺🇸 162.216.150.171

🇵🇹 89.153.125.230

🇲🇾 60.49.126.85

🇮🇩 36.66.16.233

🇺🇸 34.57.107.208

🇱🇹 213.176.26.68

🇺🇸 100.23.241.57

🇳🇱 94.154.43.131

🇨🇦 85.217.149.14

🇷🇺 80.253.31.232

🇺🇸 74.196.184.15