JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.62

104.207.58.62 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.62

Whois 104.207.58.62

IP Abuse Reports for 104.207.58.62:

This IP address has been reported a total of 135 times from 15 distinct sources. 104.207.58.62 was first reported on June 11th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-06-13 00:05:45 (3 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-05-12 22:02:19 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-12	Web App Attack SSH Hacking
🇩🇪 4server	2026-05-10 12:53:18 (1 month ago)	[SunMay1014:53:13.5518262026][security2:error][pid959030:tid959057][client104.207.58.62:0]ModSecurit ... show more [SunMay1014:53:13.5518262026][security2:error][pid959030:tid959057][client104.207.58.62:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ppinvestment.ch\"][uri\"/.git/HEAD\"][unique_id\"agB_uTDkBzN99RsXvMaM8gAAAA8\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-01-13 10:54:01 (5 months ago)	(XMLRPC) WP XMLPRC Attack 104.207.58.62 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (XMLRPC) WP XMLPRC Attack 104.207.58.62 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direction: 1 show less	Brute-Force SSH
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:45 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-24 08:14:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:14:04.922689 2025] [security2:error] [pid 22026:tid 22026] [client 104.207.58.62:25337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.keidar.com"] [uri "/.svn/wc.db"] [unique_id "aSQTzH4eErMOtjpAulLwfgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:11:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:22.371048 2025] [security2:error] [pid 11337:tid 11337] [client 104.207.58.62:41557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mauriciagandara.com"] [uri "/.git/HEAD"] [unique_id "aSQFGofZD-ZR2VBLvKMelAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:36:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:35:57.951007 2025] [security2:error] [pid 13678:tid 13678] [client 104.207.58.62:34595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.samuelcurtis.com"] [uri "/.git/HEAD"] [unique_id "aSPuvQi0eWIylqHRJ8SkSAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:28:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:28:18.112503 2025] [security2:error] [pid 16216:tid 16216] [client 104.207.58.62:37793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.photoboothtogo.com"] [uri "/.svn/wc.db"] [unique_id "aSPe4njg5kEBYd31cudGIAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-11-07 16:20:29 (7 months ago)	Form spam	Web Spam
🇦🇺 AWW-Admin	2025-10-29 15:50:27 (7 months ago)	(wordpress) Failed wordpress login from 104.207.58.62 (TH/Thailand/-)	Brute-Force
Anonymous	2025-10-11 01:02:20 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 20:47:42 (8 months ago)	Attempted brute force login to web vpn 216 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 216 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 19:00:55 (8 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 19:18:05 (8 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.165.64.49

🇺🇸 162.216.150.196

🇳🇱 91.92.40.24

🇳🇱 91.92.40.8

🇸🇬 47.82.13.159

🇳🇱 93.123.109.166

🇺🇸 67.209.80.182

🇸🇬 47.79.15.90

🇷🇺 5.167.66.41

🇨🇳 1.92.197.197

🇺🇸 2620:171:e0:f0::243

🇺🇸 162.216.150.253

🇺🇸 136.109.44.240

🇳🇵 113.199.225.48

🇳🇬 102.91.72.181

🇫🇮 80.223.200.184

🇺🇸 74.215.237.81

🇧🇷 45.238.136.181

🇳🇬 41.242.115.84

🇺🇸 24.14.236.153