JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.88

104.207.58.88 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.88

Whois 104.207.58.88

IP Abuse Reports for 104.207.58.88:

This IP address has been reported a total of 127 times from 17 distinct sources. 104.207.58.88 was first reported on June 4th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-05-13 22:08:24 (3 weeks ago)	(From [email protected]) Hi there, Not sure who on your team handles Google Ads — could ... show more (From [email protected]) Hi there, Not sure who on your team handles Google Ads — could you point me to the right person? My name is Ivan. I specialize in Google Ads and Google Ad Grants (and I share paid-ad strategies on YouTube). I visited your website: alignchiropracticwellness.com and we are seeing that you guys are currently running Google Ads or have tried in the past. If you guys want, we could help you save a lot of money for a lifetime on the Google Ad Grants account that has a $10K/month free ad spend credit (provided and paid by Google Ads each month), meaning that you don't have to spend a dime each month to get free quality leads and sales. With our expertise on Google Ads, we can also help you set up successful ad campaigns, manage and optimize them to get you more customers/clients. If you have any questions private email me at: [email protected] If you’re not the right contact, please forward this or let me know who I should contact. Thanks for your show less	Phishing Web Spam
🇦🇺 oncord	2026-02-14 16:19:48 (3 months ago)	Form spam	Web Spam
🇩🇪 F242	2026-01-30 06:09:03 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-01-30 02:42:39 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 21:42:35.845469 2026] [security2:error] [pid 1832701:tid 1832701] [client 104.207.58.88:36701] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXwam2VbARKhqKzPM9ut-gAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-01-20 08:06:19 (4 months ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2026-01-18 04:39:25 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-39.104.207.58.88.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-39.104.207.58.88.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇹 main.ows	2026-01-17 22:02:31 (4 months ago)	[17/Jan/2026:23:02:30.583463 +0100] aWwG9Drh_2qWW40ni_tZhwAAAAM 104.207.58.88 48482 217.61.13.167 70 ... show more [17/Jan/2026:23:02:30.583463 +0100] aWwG9Drh_2qWW40ni_tZhwAAAAM 104.207.58.88 48482 217.61.13.167 7081 ... show less	Bad Web Bot Web App Attack
🇦🇺 oncord	2026-01-05 13:18:21 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-29 06:05:30 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-10 13:56:39 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-06 06:34:06 (5 months ago)	Form spam	Web Spam
🇮🇩 BPS-StatisticsIndonesia	2025-12-05 02:12:11 (6 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:41:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:41:41.228923 2025] [security2:error] [pid 26120:tid 26120] [client 104.207.58.88:35703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.somehand.com"] [uri "/.git/HEAD"] [unique_id "aSahJeeygZoi_FgnGlZPAQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:48:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:48:35.522565 2025] [security2:error] [pid 3586:tid 3586] [client 104.207.58.88:31215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.birdlovers.net"] [uri "/.git/HEAD"] [unique_id "aSZqgxkAch6RWkk3wrJZ9gAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:27:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:27:19.446661 2025] [security2:error] [pid 3343204:tid 3343226] [client 104.207.58.88:55879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.worldecom.org"] [uri "/.env"] [unique_id "aSZJZ7RcUqZZgnn61k0LWQAAAE8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.159.196.254

🇺🇸 178.156.253.13

🇳🇱 164.90.195.107

🇺🇸 66.132.195.111

🇨🇦 198.50.197.28

🇿🇦 172.253.249.220

🇺🇸 162.216.149.73

🇱🇹 45.227.254.170

🇷🇴 2.57.121.25

🇫🇮 173.194.98.16

🇩🇪 69.5.169.161

🇺🇸 65.111.13.181

🇰🇷 49.247.37.22

🇸🇬 43.159.58.77

🇺🇸 2602:fb54:1400::161

🇻🇪 190.114.242.153

🇲🇰 185.233.210.8

🇬🇧 35.203.211.58

🇬🇧 35.203.210.246

🇦🇷 181.105.224.109