JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.237

104.207.52.237 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 45%: ?

45%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.237

Whois 104.207.52.237

IP Abuse Reports for 104.207.52.237:

This IP address has been reported a total of 135 times from 23 distinct sources. 104.207.52.237 was first reported on June 7th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-07-09 11:44:26 (2 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 pm33	2026-07-09 06:52:13 (7 hours ago)	Wordpress login attempts	Brute-Force
🇺🇸 lostswordfish.com	2026-07-08 08:00:06 (1 day ago)	Wordfence waf block on ncrsol	Web App Attack
Anonymous	2026-07-06 14:21:01 (3 days ago)	[server.tmg.gr] httpd-login-spray-site: sites=www.crisis-management2019.eu; logs=/var/log/httpd/doma ... show more [server.tmg.gr] httpd-login-spray-site: sites=www.crisis-management2019.eu; logs=/var/log/httpd/domains/crisis-management2019.eu.log; samples=site_wide=true \| distinct_ips=12 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 koinkash.org	2026-07-05 18:19:03 (3 days ago)	They are fraudulent. Malicious threat actor requesting php file /wp-login.php	Web App Attack
🇺🇸 dtorrer	2026-07-04 15:07:33 (4 days ago)	Brute-force general attack.	Brute-Force
Anonymous	2026-06-27 23:44:35 (1 week ago)	[server.tmg.gr] httpd-login-spray-site: sites=geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; ... show more [server.tmg.gr] httpd-login-spray-site: sites=geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; samples=site_wide=true \| distinct_ips=14 \| /wp-login.php show less	Hacking Web App Attack
🇩🇪 LRob	2026-06-26 15:15:22 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-10 19:00:22 (5 months ago)	WP Login Scan Activities	Web App Attack
🇦🇺 AWW-Admin	2025-10-29 16:07:53 (8 months ago)	(wordpress) Failed wordpress login from 104.207.52.237 (GB/United Kingdom/-)	Brute-Force
🇩🇪 ps-center	2025-10-18 22:56:15 (8 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
🇺🇸 TPI-Abuse	2025-04-09 06:15:11 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 104.207.52.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.52.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 02:15:06.529822 2025] [security2:error] [pid 2673486:tid 2673486] [client 104.207.52.237:25439] [client 104.207.52.237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bohk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bohk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_YQamDppGAiVqgiNvZGDQAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-09 04:52:06 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 104.207.52.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.52.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 00:51:59.002482 2025] [security2:error] [pid 32500:tid 32500] [client 104.207.52.237:17675] [client 104.207.52.237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wplusw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wplusw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_X87hDEc53Xktn7LJg76AAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-08 21:27:06 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 104.207.52.237 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.52.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 17:27:01.667586 2025] [security2:error] [pid 29034:tid 29101] [client 104.207.52.237:10833] [client 104.207.52.237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|driftwoodblue.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "driftwoodblue.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_WUpYF9APDgibwN0-hHgAAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-06 20:02:55 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 182.189.94.88

🇨🇳 218.66.32.104

🇩🇪 213.209.159.114

🇨🇳 106.13.48.156

🇫🇷 91.231.89.47

🇮🇩 69.5.20.93

🇺🇸 66.132.172.220

🇺🇸 66.132.172.103

🇨🇦 2604:a880:cad:d0:0:1:90ab:7001

🇮🇱 203.159.81.37

🇨🇳 183.236.75.189

🇧🇩 157.119.184.41

🇨🇱 146.235.247.191

🇸🇬 94.231.206.10

🇨🇴 181.234.8.144

🇭🇰 154.219.106.73

🇹🇭 125.24.57.120

🇭🇰 103.81.169.162

🇷🇴 92.118.39.232

🇨🇦 85.217.149.48