JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.86

104.207.58.86 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.86

Whois 104.207.58.86

IP Abuse Reports for 104.207.58.86:

This IP address has been reported a total of 124 times from 13 distinct sources. 104.207.58.86 was first reported on June 5th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-27 16:45:16 (4 months ago)	2026-01-27T18:45:15.791407+02:00 zanati wp(www.sahpa.co.za)[785902]: Blocked authentication attempt ... show more 2026-01-27T18:45:15.791407+02:00 zanati wp(www.sahpa.co.za)[785902]: Blocked authentication attempt for [email protected] from 104.207.58.86 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:41:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:41:24.336229 2025] [security2:error] [pid 29565:tid 29565] [client 104.207.58.86:55333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.modalsoftware.com"] [uri "/.env"] [unique_id "aSVBhJYaYFdbVzVe4-lEpwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:23:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:23:08.991090 2025] [security2:error] [pid 25978:tid 25978] [client 104.207.58.86:15669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kirbysmw.com"] [uri "/.svn/wc.db"] [unique_id "aSU9PDuJuLdpWerrbtpuBQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:06:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:06:35.808428 2025] [security2:error] [pid 9566:tid 9566] [client 104.207.58.86:46709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.texaslawman.net"] [uri "/.svn/wc.db"] [unique_id "aSU5W9ezVPfe8Ei5Cb7f3QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:05:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:05:33.610887 2025] [security2:error] [pid 1817001:tid 1817042] [client 104.207.58.86:9037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.louisgfazzi.com"] [uri "/.svn/wc.db"] [unique_id "aSUrDWR1ttxeyDpsCa9MxwAAAYM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:16:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:15:56.087342 2025] [security2:error] [pid 27966:tid 27966] [client 104.207.58.86:25437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bacona.org"] [uri "/.env"] [unique_id "aSUfbHFRcdR9OuRXeQ3CQwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:33:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:33:24.966396 2025] [security2:error] [pid 13531:tid 13531] [client 104.207.58.86:28791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.psychologists-omega.com"] [uri "/.svn/wc.db"] [unique_id "aSUVdPCxU3ORgpT8XaJTigAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-10-16 11:30:22 (7 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-13 18:20:07 (7 months ago)	(mod_security) mod_security (id:210831) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 104.207.58.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 14:19:56.879435 2025] [security2:error] [pid 17277:tid 17277] [client 104.207.58.86:51873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/"] [unique_id "aO1CzJZaqvb79ferjHak4gAAAAg"], referer: http://backstore.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-10-13 16:24:55 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-24.104.207.58.86.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-24.104.207.58.86.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2025-04-07 11:55:38 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 15:50:11 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 21:24:17 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 22:07:28 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 08:04:19 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.48.38.223

🇨🇳 223.100.224.75

🇭🇰 218.103.120.150

🇮🇳 182.95.232.186

🇷🇺 176.109.97.11

🇭🇰 152.32.129.236

🇨🇳 120.243.125.25

🇮🇳 115.241.228.34

🇨🇳 110.249.202.229

🇻🇳 103.77.215.62

🇮🇹 95.210.105.202

🇸🇪 83.226.56.106

🇷🇺 62.16.103.46

🇵🇱 45.141.233.118

🇹🇷 37.221.79.152

🇦🇺 1.145.119.37

🇷🇺 176.57.76.206

🇺🇸 162.217.227.37

🇮🇳 125.19.163.150

🇮🇳 110.227.211.82