JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.137

104.207.52.137 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.137

Whois 104.207.52.137

IP Abuse Reports for 104.207.52.137:

This IP address has been reported a total of 126 times from 15 distinct sources. 104.207.52.137 was first reported on June 7th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-06-27 19:54:57 (1 day ago)	wew-Joomla User : try to access forms...	Hacking
🇧🇪 Saec	2026-06-25 10:45:04 (3 days ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)	Port Scan Web App Attack
🇩🇪 4server	2026-04-13 17:55:55 (2 months ago)	[MonApr1319:55:25.4084072026][security2:error][pid1311240:tid1311374][client104.207.52.137:0]ModSecu ... show more [MonApr1319:55:25.4084072026][security2:error][pid1311240:tid1311374][client104.207.52.137:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"195\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"farmaciaferrari.ch\"][uri\"/.env\"][unique_id\"ad0uDb0jYYDc4rXD3HtIGQAAAJc\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇪🇸 10dencehispahard SL	2026-01-26 07:40:51 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇫🇷 tilellit.pro	2026-01-20 02:04:06 (5 months ago)	Fail2Ban banned 104.207.52.137 for security violations in jail wp-armour. Log: 2026/01/20 02:04:06 [ ... show more Fail2Ban banned 104.207.52.137 for security violations in jail wp-armour. Log: 2026/01/20 02:04:06 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.52.137 \| Target: wplogin" , client: 104.207.52.137, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2025-12-03 05:40:59 (6 months ago)	(mod_security) mod_security (id:210740) triggered by 104.207.52.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 104.207.52.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 00:40:44.162214 2025] [security2:error] [pid 12222:tid 12222] [client 104.207.52.137:53683] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.powerkiteforum.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerkiteforum.com"] [uri "/scarbook.php"] [unique_id "aS_NXNYtKCeOR0KSNByR5wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-11-28 22:58:10 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 10dencehispahard SL	2025-11-19 07:07:46 (7 months ago)	WP probing for vulnerabilities	Hacking Exploited Host
Anonymous	2025-10-11 08:18:57 (8 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 16:48:04 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 14:35:57 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 22:27:34 (8 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 13:28:50 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 14:02:18 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.225

🇪🇪 196.196.253.20

🇩🇪 194.88.98.119

🇧🇷 179.189.205.229

🇩🇪 165.245.253.202

🇨🇳 123.233.239.130

🇨🇳 123.178.210.10

🇭🇰 103.52.153.215

🇸🇬 101.32.244.206

🇲🇽 45.189.150.26

🇸🇬 43.98.197.98

🇰🇷 34.22.70.42

🇺🇸 205.210.31.91

🇭🇰 172.253.6.28

🇨🇳 101.126.153.162

🇱🇹 45.227.254.170

🇧🇷 45.160.86.43

🇺🇸 44.4.221.184

🇺🇸 20.189.188.0

🇨🇳 14.103.102.130