JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.74

104.207.58.74 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.74

Whois 104.207.58.74

IP Abuse Reports for 104.207.58.74:

This IP address has been reported a total of 134 times from 20 distinct sources. 104.207.58.74 was first reported on June 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-02 22:16:01 (1 week ago)	2026-06-02 00:07:53,831 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 104.207.58.74 20 ... show more 2026-06-02 00:07:53,831 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 104.207.58.74 2026-06-02 00:07:53,831 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 104.207.58.74 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇦🇺 oncord	2026-05-24 07:13:14 (2 weeks ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-05-22 15:24:33 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-24.104.207.58.74.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-24.104.207.58.74.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇸🇮 administrator	2026-05-04 16:34:16 (1 month ago)	2026-04-12 02:28:12,818 fail2ban.actions [1294183]: NOTICE [ninjafirewall] Ban 104.207.58.74 ... show more 2026-04-12 02:28:12,818 fail2ban.actions [1294183]: NOTICE [ninjafirewall] Ban 104.207.58.74 2026-04-14 04:35:45,176 fail2ban.actions [1063]: NOTICE [ninjafirewall] Ban 104.207.58.74 2026-05-04 18:23:50,007 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 104.207.58.74 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
Anonymous	2026-04-26 13:28:03 (1 month ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-04-11 10:33:09 (2 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 windowsforum	2026-03-10 15:32:59 (3 months ago)	Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, username=AleidaDunn	Web Spam Bad Web Bot
🇱🇻 garmtech.com	2026-03-09 07:01:30 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-01.104.207.58.74.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-01.104.207.58.74.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:37 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 mrcrassi	2025-12-24 14:24:54 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2025-12-04 15:40:03 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-25 04:44:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:43:52.358126 2025] [security2:error] [pid 25578:tid 25578] [client 104.207.58.74:52459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.butkiewiczfamilyfarm.com"] [uri "/.git/HEAD"] [unique_id "aSU0CBwtioiE27UC6giD3QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:08:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:29.389651 2025] [security2:error] [pid 5375:tid 5375] [client 104.207.58.74:47991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lakesidedetectiveagency.com"] [uri "/.env"] [unique_id "aSUrvavFbJTIn7FfiLaG3AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:11:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:11:26.670727 2025] [security2:error] [pid 711354:tid 711354] [client 104.207.58.74:46499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.theamarals.com"] [uri "/.svn/wc.db"] [unique_id "aSUeXsAqyCZHSg3SzBTw5AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:39:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:39:12.855362 2025] [security2:error] [pid 32700:tid 32709] [client 104.207.58.74:45127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.proracersecrets.xxxmain.com"] [uri "/.svn/wc.db"] [unique_id "aSUW0LcrjRrp2J9TXtyhpgAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.172

🇺🇸 103.203.57.2

🇺🇸 40.124.173.234

🇰🇷 222.118.59.16

🇺🇸 216.180.246.4

🇭🇰 103.14.33.174

🇺🇸 34.107.243.93

🇮🇳 34.93.241.217

🇷🇴 2.57.122.173

🇭🇰 199.45.154.182

🇫🇷 194.226.169.22

🇮🇳 123.253.162.254

🇰🇿 95.58.255.251

🇧🇬 93.94.141.115

🇧🇷 45.229.91.34

🇳🇱 34.147.30.68

🇺🇸 184.72.121.156

🇮🇳 135.13.28.35

🇻🇳 103.172.236.241

🇱🇹 81.30.98.142