JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.66

104.207.58.66 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.66

Whois 104.207.58.66

IP Abuse Reports for 104.207.58.66:

This IP address has been reported a total of 126 times from 15 distinct sources. 104.207.58.66 was first reported on June 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-05-30 07:44:36 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-05-30 04:12:08 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-05-29 02:09:09 (1 week ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; s ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; samples=site_wide=true \| distinct_ips=22 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 masterguru	2026-04-06 01:57:57 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-03-29 13:42:41 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇪🇸 librebit	2026-03-29 02:02:02 (2 months ago)	Brute force	Brute-Force
🇫🇷 masterguru	2026-03-28 10:24:09 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-03-26 15:29:49 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.66 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2026-01-07 06:42:23 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 mrcrassi	2025-12-12 14:23:57 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-09 13:17:23 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 08:17:16.023010 2025] [security2:error] [pid 13278:tid 13278] [client 104.207.58.66:23841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proboundary.com"] [uri "/.env"] [unique_id "aTghXFtzhQfWFJVanKrmNQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 03:07:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 22:07:31.217070 2025] [security2:error] [pid 628:tid 628] [client 104.207.58.66:49377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "be4ventures.com"] [uri "/.env"] [unique_id "aTeSc8ypEp66_wCKF0iaqwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 13:28:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:28:44.693551 2025] [security2:error] [pid 31560:tid 31560] [client 104.207.58.66:45321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hazardrecords.org"] [uri "/.git/HEAD"] [unique_id "aTWBDO7ca1rG3gIowQsgCgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 16:23:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:23:43.690140 2025] [security2:error] [pid 14814:tid 14814] [client 104.207.58.66:17267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apsni.net"] [uri "/.svn/wc.db"] [unique_id "aTRYjxVSwr-VG9cE4FteOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-05 14:04:32 (6 months ago)	Blocking for trying to access an exploit file: /.env	Hacking

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.63.2.221

🇺🇸 195.63.2.3

🇻🇳 103.176.20.115

🇺🇸 65.49.1.122

🇯🇵 35.194.126.188

🇫🇷 5.39.1.239

🇩🇪 195.63.19.251

🇩🇪 195.63.19.206

🇩🇪 195.63.19.99

🇺🇸 195.63.2.164

🇺🇸 195.63.2.105

🇮🇩 103.101.216.26

🇸🇬 101.47.49.131

🇳🇱 85.11.167.11

🇷🇴 80.94.92.184

🇳🇱 45.148.10.147

🇯🇵 8.216.5.111

🇩🇪 195.63.19.189

🇩🇪 195.63.19.143

🇩🇪 195.63.19.16