JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.133

104.207.52.133 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.133

Whois 104.207.52.133

IP Abuse Reports for 104.207.52.133:

This IP address has been reported a total of 137 times from 17 distinct sources. 104.207.52.133 was first reported on June 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-05-19 21:11:06 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:21:31 (2 weeks ago)	MatShield L7: blocked on chat.justchat.icu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-14 21:32:38 (3 weeks ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-02-18 01:53:10 (3 months ago)	web form spam (Nilsimsa: e6khHIIDIORHN6iwyoqXceUhXHlRegwUISitICp25I8)	Web Spam
🇺🇸 TPI-Abuse	2026-01-08 14:20:07 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 09:19:59.976200 2026] [security2:error] [pid 8494:tid 8494] [client 104.207.52.133:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perl-photo.com"] [uri "/.svn/wc.db"] [unique_id "aV-9D_yev5qqh08-SolbWAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-02 18:39:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 13:39:18.058245 2026] [security2:error] [pid 1762:tid 1762] [client 104.207.52.133:39497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.skintormint.com"] [uri "/.env"] [unique_id "aVgQ1gLOsseTcKH4EXvbkwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-12-07 00:05:46 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇧🇪 madeit	2025-11-30 04:36:10 (6 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:50:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:50:41.820872 2025] [security2:error] [pid 26880:tid 26880] [client 104.207.52.133:59747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fatparrots.org"] [uri "/.svn/wc.db"] [unique_id "aSPkIf0CddIeIwh09GWlYQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 17:47:29 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.52.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 12:47:26.499096 2025] [security2:error] [pid 18811:tid 18811] [client 104.207.52.133:35317] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.whysong.net\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.whysong.net"] [uri "/s3cmd.ini"] [unique_id "aRdrLnwjCvaRqUm6yMKyDwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-10-09 22:58:45 (7 months ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-10-09 15:09:15 (7 months ago)	(From [email protected]) Tired of low website traffic? This video shows how our AI can help: h ... show more (From [email protected]) Tired of low website traffic? This video shows how our AI can help: https://www.youtube.com/watch?v=VOdZEKK52Rw show less	Phishing Web Spam
Anonymous	2025-04-07 04:29:24 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 23:09:29 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:01:26 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.146.52

🇫🇮 147.185.133.225

🇨🇦 99.249.161.165

🇻🇪 38.183.113.83

🇬🇧 195.206.182.198

🇺🇸 173.244.60.155

🇺🇸 172.203.204.225

🇮🇩 165.101.230.18

🇺🇸 154.83.197.128

🇺🇸 97.90.16.100

🇳🇱 86.54.31.32

🇷🇴 80.94.92.167

🇺🇸 64.62.156.172

🇳🇱 45.148.10.151

🇧🇷 179.208.226.100

🇦🇪 91.72.240.5

🇵🇰 72.255.59.150

🇳🇱 45.198.224.5

🇬🇧 35.203.211.251

🇬🇧 31.171.130.113