JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.33

104.207.52.33 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.33

Whois 104.207.52.33

IP Abuse Reports for 104.207.52.33:

This IP address has been reported a total of 129 times from 13 distinct sources. 104.207.52.33 was first reported on June 6th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 georgengelmann	2026-05-22 04:31:29 (2 weeks ago)	Failed login attempt for XMC.pl-System	Brute-Force Web App Attack
🇮🇹 [email protected]	2026-04-18 01:47:23 (1 month ago)	[Sat Apr 18 03:47:23.485156 2026] [authz_core:error] [pid 560721:tid 560751] [remote 104.207.52.33:1 ... show more [Sat Apr 18 03:47:23.485156 2026] [authz_core:error] [pid 560721:tid 560751] [remote 104.207.52.33:11675] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
Anonymous	2026-02-06 04:00:22 (4 months ago)	PAD: ModSec_Critical detected	Hacking
🇺🇸 TPI-Abuse	2026-01-08 13:59:54 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 08:59:48.611417 2026] [security2:error] [pid 28644:tid 28644] [client 104.207.52.33:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ard.global"] [uri "/.git/HEAD"] [unique_id "aV-4VOOf1Xrs2Lpp08UVZQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:54:31 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:54:26.921227 2025] [security2:error] [pid 15701:tid 15701] [client 104.207.52.33:23539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nutz-r-us.com"] [uri "/.svn/wc.db"] [unique_id "aVIXkq1eo_aYgN74WJzIMQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:33:12 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:33:06.576120 2025] [security2:error] [pid 1232270:tid 1232270] [client 104.207.52.33:38267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interior-cosmetics.com"] [uri "/.svn/wc.db"] [unique_id "aVISkiPH49RP5E1ePebjYQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:44:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:44:48.485748 2025] [security2:error] [pid 16119:tid 16119] [client 104.207.52.33:13605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiireservations.com"] [uri "/.git/HEAD"] [unique_id "aVIHQOEle--w0nV_AlThgAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:00:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:00:45.311135 2025] [security2:error] [pid 13041:tid 13041] [client 104.207.52.33:27479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentuckianacordcutters.com"] [uri "/.svn/wc.db"] [unique_id "aVH87b065zXzr3ffdxI1ygAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2025-12-29 03:50:05 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
Anonymous	2025-12-21 17:17:48 (5 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.21 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 19:15:28 (5 months ago)	Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report ti ... show more Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-01 23:40:04 (6 months ago)	Attempted brute force login to web vpn 918 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 918 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:04:09 (6 months ago)	Attempted brute force login to web vpn 866 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 866 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:58:38 (6 months ago)	Attempted brute force login to web vpn 2684 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2684 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇳🇱 homeshowdomain.nl	2025-11-24 23:02:23 (6 months ago)	Auto-ban: >3000 req/min op 2025-11-24	Hacking Web App Attack SSH

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇺🇸 172.253.217.26

🇸🇬 167.172.93.20

🇮🇳 116.68.103.73

🇺🇸 100.29.192.57

🇩🇪 88.198.25.181

🇮🇱 82.102.188.117

🇮🇳 52.140.76.154

🇸🇬 43.160.233.207

🇸🇬 43.156.201.48

🇩🇪 31.70.65.19

🇸🇻 190.86.135.210

🇨🇳 115.190.172.63

🇨🇳 112.225.37.197

🇳🇱 45.142.193.10

🇺🇸 2001:470:1:332::a2

🇨🇴 179.33.210.213

🇳🇱 176.65.139.56

🇩🇪 144.76.159.59

🇨🇳 117.187.127.143