JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.23

104.207.52.23 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.23

Whois 104.207.52.23

IP Abuse Reports for 104.207.52.23:

This IP address has been reported a total of 86 times from 17 distinct sources. 104.207.52.23 was first reported on June 4th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bitblockit	2026-05-23 23:25:45 (3 weeks ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 8545/tcp. Observed event time: 2026-05-23 23:25:45 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-23 23:24:43 (3 weeks ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 8545/tcp. Observed event time: 2026-05-23 23:24:43 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇨🇳 ThreatBook.io	2026-04-18 00:23:55 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.52.23 20 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.52.23 2026-04-17 21:01:43 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-23 00:14:08 (2 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.52.23 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.52.23 2026-03-22 11:57:30 / show less	Web App Attack
🇨🇭 backslash	2026-01-20 13:20:15 (4 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-12 20:50:58 (5 months ago)	(mod_security) mod_security (id:217280) triggered by 104.207.52.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 104.207.52.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 15:50:50.063618 2026] [security2:error] [pid 16655:tid 16655] [client 104.207.52.23:15329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|southtncardio.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "southtncardio.com"] [uri "/index.php/contact-stc"] [unique_id "aWVeqnwjxnN59gAztDaVIAAAAAk"], referer: http://southtncardio.com/index.php/contact-stc show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-12-26 00:19:14 (5 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.52.23 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.52.23 2025-12-25 11:27:49 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-24 00:32:44 (5 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.52.23 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.52.23 2025-12-23 20:29:53 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2025-12-23 08:18:20 /config/DataSetConfig%23.xml show less	Web App Attack
Anonymous	2025-12-21 17:56:44 (5 months ago)	Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:35:59 (5 months ago)	Attempted brute force login to web vpn 216 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 216 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-01 23:35:43 (6 months ago)	Attempted brute force login to web vpn 920 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 920 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:20:10 (6 months ago)	Attempted brute force login to web vpn 918 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 918 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:06:55 (6 months ago)	Attempted brute force login to web vpn 2372 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2372 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 oncord	2025-11-23 01:36:00 (6 months ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2025-11-18 23:55:05 (6 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.52.23 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.52.23 2025-11-18 14:34:18 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.100

🇧🇷 200.108.175.14

🇺🇸 162.216.150.72

🇺🇸 107.174.194.146

🇺🇸 45.86.19.227

🇫🇷 45.81.243.62

🇨🇳 14.116.172.24

🇷🇺 213.234.9.218

🇩🇪 193.36.84.205

🇨🇳 175.153.167.179

🇹🇼 128.14.236.224

🇺🇸 66.132.195.73

🇺🇸 64.23.253.7

🇬🇧 62.49.240.61

🇺🇸 52.165.82.26

🇸🇬 47.79.51.147

🇺🇸 45.86.19.185

🇯🇵 43.165.185.71

🇨🇳 222.129.37.92

🇺🇸 216.25.124.33