JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.52.64

104.207.52.64 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.52.64

Whois 104.207.52.64

IP Abuse Reports for 104.207.52.64:

This IP address has been reported a total of 129 times from 13 distinct sources. 104.207.52.64 was first reported on June 7th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-06-08 00:09:03 (3 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 mnsf	2026-06-02 20:06:07 (1 week ago)	Login Too Frequent (6)	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-06-01 04:08:38 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 ELYAZ	2026-05-30 17:45:19 (1 week ago)	(y4) Failed scan -byebye- from 104.207.52.64 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
Anonymous	2026-05-30 09:19:28 (1 week ago)	Web attack blocked by Wordfence on vestingstadvalkenburg.nl (1 hit). Reported by CRMON.	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 07:58:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:58:15.097405 2025] [security2:error] [pid 19980:tid 19980] [client 104.207.52.64:57673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawkinsenterprise.com"] [uri "/.git/HEAD"] [unique_id "aS6cF6WInmeIjRTWadXkGgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 07:02:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:02:44.283944 2025] [security2:error] [pid 11908:tid 11930] [client 104.207.52.64:17133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamper.com"] [uri "/.env"] [unique_id "aS6PFMliGRBvMFEAm_wt5wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:56:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:56:45.250998 2025] [security2:error] [pid 14153:tid 14153] [client 104.207.52.64:14223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamariposagallery.com"] [uri "/.svn/wc.db"] [unique_id "aS5_ndMX2Po6SGkLT-ruOgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:58:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:58:42.769499 2025] [security2:error] [pid 18026:tid 18026] [client 104.207.52.64:40105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "900billiondollarsworthofstone.com"] [uri "/.git/HEAD"] [unique_id "aS5yAtsuMwXGWJC2VHo4MQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:04:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.52.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:04:20.141669 2025] [security2:error] [pid 11264:tid 11264] [client 104.207.52.64:26105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testrong.com"] [uri "/.env"] [unique_id "aS5lRLa_fZM7pG2M40MujAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-11 03:46:34 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 22:08:14 (8 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 21:30:41 (8 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 20:22:21 (8 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 21:49:46 (8 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c20::124

🇨🇭 209.99.190.113

🇦🇷 200.32.52.150

🇳🇱 176.65.148.242

🇮🇳 123.253.162.254

🇺🇸 76.79.213.70

🇹🇷 31.145.131.202

🇰🇷 3.37.225.248

🇨🇮 2001:42d8:450b:fd00:399b:1034:6d90:733

🇦🇿 188.253.214.8

🇦🇷 186.22.19.183

🇰🇷 112.216.129.27

🇺🇸 98.97.38.80

🇰🇷 61.79.189.2

🇬🇧 35.203.211.52

🇬🇧 31.14.254.122

🇷🇴 2.57.121.112

🇺🇸 209.85.222.53

🇺🇸 209.85.222.52

🇺🇸 209.85.217.49