JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.62.158

104.207.62.158 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.62.158

Whois 104.207.62.158

IP Abuse Reports for 104.207.62.158:

This IP address has been reported a total of 136 times from 17 distinct sources. 104.207.62.158 was first reported on June 7th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (3 months ago)	Probing for Exploits	Exploited Host Web App Attack
Anonymous	2026-01-09 22:37:53 (4 months ago)	botnet	DDoS Attack
Anonymous	2025-12-30 01:38:10 (5 months ago)	2025-12-30T03:38:10.062289+02:00 zanati wp(www.sahpa.co.za)[593708]: Blocked authentication attempt ... show more 2025-12-30T03:38:10.062289+02:00 zanati wp(www.sahpa.co.za)[593708]: Blocked authentication attempt for [email protected] from 104.207.62.158 ... show less	Web App Attack
🇨🇦 SSH-Admin	2025-12-27 22:05:38 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇮🇩 Burayot	2025-11-25 19:52:15 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.62.158 (FR/France/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.62.158 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:03:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:03:39.267682 2025] [security2:error] [pid 22792:tid 22792] [client 104.207.62.158:16581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sircain.net"] [uri "/.svn/wc.db"] [unique_id "aSVUy80jLNz8p1eFi9CszAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:17:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:17:01.468277 2025] [security2:error] [pid 27935:tid 27935] [client 104.207.62.158:44491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cvoguemag.com"] [uri "/.env"] [unique_id "aSVJ3dR2NweojEheHPngBgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:51:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:50:58.416717 2025] [security2:error] [pid 1964:tid 1964] [client 104.207.62.158:29981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dwipapuri-abadi.com"] [uri "/.git/HEAD"] [unique_id "aSU1srC_lGtk9djVXzCg0wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:10:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:09:58.954496 2025] [security2:error] [pid 12949:tid 12949] [client 104.207.62.158:20535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.maeghanan.com"] [uri "/.env"] [unique_id "aSUsFoZ-4JFZO0u1_nmtOAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:09:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:09:05.268940 2025] [security2:error] [pid 716055:tid 716055] [client 104.207.62.158:29599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.srtmanagementservices.com"] [uri "/.git/HEAD"] [unique_id "aSUd0TtFwPUQGX1TedB5HQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:04:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:04:44.999760 2025] [security2:error] [pid 18338:tid 18338] [client 104.207.62.158:32689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cardinalcouncilgc.org"] [uri "/.git/HEAD"] [unique_id "aSUOvPZD_Rb1aTe-5uzDZQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:22:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:22:20.686410 2025] [security2:error] [pid 25820:tid 25820] [client 104.207.62.158:53235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.directoryofbikes.com"] [uri "/.svn/wc.db"] [unique_id "aSUEzOWmA4kQPHD0fZ9auQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:59:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:59:27.362088 2025] [security2:error] [pid 32024:tid 32024] [client 104.207.62.158:50579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.na-creator.com"] [uri "/.git/HEAD"] [unique_id "aST_b7iZnD3_-GwK5HUJrgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:42:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:42:01.880793 2025] [security2:error] [pid 17667:tid 17667] [client 104.207.62.158:51391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nvafc.com"] [uri "/.git/HEAD"] [unique_id "aST7WfF5-4Uh31dzDBuyCAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:20:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:20:03.777574 2025] [security2:error] [pid 25468:tid 25468] [client 104.207.62.158:10585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pyxelstudios.com"] [uri "/.svn/wc.db"] [unique_id "aST2M44VLoDmn-WUFUSRYwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a02:4780:1:541:0:39fd:eb2:1

🇺🇸 206.189.233.36

🇺🇸 138.197.200.106

🇵🇰 103.141.5.89

🇸🇬 101.32.248.94

🇸🇬 43.133.61.254

🇩🇪 213.209.159.11

🇰🇪 196.207.177.56

🇧🇷 189.37.64.147

🇳🇱 176.65.139.43

🇺🇸 157.245.247.222

🇺🇸 107.172.118.172

🇩🇪 91.107.151.199

🇱🇹 81.30.98.144

🇮🇳 49.249.205.38

🇿🇲 41.60.161.173

🇩🇪 212.132.120.41

🇧🇬 146.70.245.138

🇸🇬 43.172.197.12

🇺🇸 192.183.59.3