JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.238

104.207.52.238 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.238

Whois 104.207.52.238

IP Abuse Reports for 104.207.52.238:

This IP address has been reported a total of 124 times from 12 distinct sources. 104.207.52.238 was first reported on June 20th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 jjnxpct	2026-04-04 03:53:48 (2 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /component/pthucontent/article/397-pan-african-theology-roundtable-like-father-like-son-holiness-and-missio-dei-in-1-peter (Rule ID: 942540) - SQL Authentication bypass (split query) [Suspicious: '; found within ARGS:Itemid: ';] show less	Web App Attack SQL Injection Brute-Force
🇳🇱 Savvii	2026-04-02 17:29:59 (2 months ago)	20 attempts against mh-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-25 03:23:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:23:20.552063 2025] [security2:error] [pid 3508:tid 3508] [client 104.207.52.238:37571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gestiofiscal.com"] [uri "/.env"] [unique_id "aSUhKPSqrNcVd8B_tAkYlgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:31:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:31:10.758177 2025] [security2:error] [pid 25338:tid 25338] [client 104.207.52.238:23943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.theknowledgemaster.com"] [uri "/.git/HEAD"] [unique_id "aSUU7t4APfIKdbK9dm8VdwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:55:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:55:32.567397 2025] [security2:error] [pid 5698:tid 5698] [client 104.207.52.238:9895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.harveyyachtsales.com"] [uri "/.git/HEAD"] [unique_id "aSUMlAjX37Bh122mE2XKzgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Carsten	2025-11-25 01:43:23 (6 months ago)	GET [.aws/credentials]	Port Scan
🇺🇸 TPI-Abuse	2025-11-25 01:24:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:24:31.900165 2025] [security2:error] [pid 19025:tid 19025] [client 104.207.52.238:31047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comfortcartel.com"] [uri "/.svn/wc.db"] [unique_id "aSUFTwPiGH4d75rnKe7xKQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:58:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:57:58.764761 2025] [security2:error] [pid 17055:tid 17055] [client 104.207.52.238:50881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thegameforeverybody.com"] [uri "/.git/HEAD"] [unique_id "aST_FphZtBk1v8cDyQ6OQAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-07 11:56:05 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 06:21:19 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 19:11:13 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 12:29:41 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 13:45:00 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 20:45:23 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.76.134.111

🇩🇪 102.220.160.136

🇳🇱 93.123.109.105

🇺🇸 64.62.156.162

🇰🇿 31.56.240.34

🇺🇸 2600:3c00::2000:cdff:fe0b:55ef

🇩🇪 155.117.234.80

🇺🇸 100.29.192.100

🇺🇸 93.152.212.55

🇪🇸 86.109.171.174

🇨🇳 60.191.221.172

🇺🇸 54.234.110.115

🇺🇸 34.122.147.229

🇰🇿 31.56.240.36

🇨🇳 175.170.39.12

🇫🇷 163.172.143.147

🇲🇲 103.233.206.154

🇺🇸 65.49.1.64

🇺🇸 64.94.159.233

🇺🇸 54.244.212.10