JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.56

104.207.58.56 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.56

Whois 104.207.58.56

IP Abuse Reports for 104.207.58.56:

This IP address has been reported a total of 145 times from 26 distinct sources. 104.207.58.56 was first reported on June 12th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-05-11 21:22:44 (3 weeks ago)	[Mon May 11 23:22:43.547285 2026] [authz_core:error] [pid 4068238:tid 4068256] [remote 104.207.58.56 ... show more [Mon May 11 23:22:43.547285 2026] [authz_core:error] [pid 4068238:tid 4068256] [remote 104.207.58.56:31451] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-07 01:07:22 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:42:10 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇪🇸 librebit	2026-04-24 23:45:01 (1 month ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-04-24 13:19:01 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-22 23:57:32 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-15 10:20:55 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.56 (TH/Thailand/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 Jean Valjean	2025-12-30 23:20:48 (5 months ago)	Fail2ban Caboom : xmlrpc.php Abuse	SQL Injection Web App Attack
🇨🇭 backslash	2025-12-30 16:05:06 (5 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇹 VHosting	2025-12-30 02:50:07 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇦🇺 oncord	2025-12-13 21:06:48 (5 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-26 06:42:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:41:58.702026 2025] [security2:error] [pid 7157:tid 7157] [client 104.207.58.56:35087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.unitedfuturistassociation.com"] [uri "/.svn/wc.db"] [unique_id "aSahNkb0v52V6FeLT9N9RwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:04:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:04:00.053736 2025] [security2:error] [pid 25067:tid 25067] [client 104.207.58.56:15777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.merrickarts.azbrooks.com"] [uri "/.svn/wc.db"] [unique_id "aSaKQPg43KUBEmUsEJNjeQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:37:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:37:50.540033 2025] [security2:error] [pid 16551:tid 16551] [client 104.207.58.56:17021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ricketyshack.ca"] [uri "/.svn/wc.db"] [unique_id "aSZ2Dgv1kdiz-jv11n4UDgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:27:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:52.522033 2025] [security2:error] [pid 28211:tid 28211] [client 104.207.58.56:56587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oldmaninthepeanut.com"] [uri "/.git/HEAD"] [unique_id "aSQlGAMINhKkbDOrrdpCEgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 192.253.248.169

🇩🇪 172.69.151.66

🇸🇿 143.105.155.55

🇨🇳 111.228.33.68

🇳🇱 93.123.118.24

🇷🇴 92.118.39.236

🇳🇱 85.11.167.7

🇬🇧 31.14.254.7

🇩🇪 213.209.159.235

🇨🇳 180.76.183.185

🇨🇳 123.160.175.144

🇷🇴 80.94.92.167

🇳🇱 77.83.39.217

🇸🇬 8.222.199.148

🇬🇧 185.249.74.198

🇳🇱 176.65.148.84

🇺🇸 172.253.251.158

🇧🇷 170.82.182.187

🇵🇭 154.18.197.35

🇵🇹 149.88.20.130