JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.252.191.130

104.252.191.130 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 27%: ?

27%

ISP	Subnet Digital LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	subnetdigital.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.252.191.130

Whois 104.252.191.130

IP Abuse Reports for 104.252.191.130:

This IP address has been reported a total of 44 times from 31 distinct sources. 104.252.191.130 was first reported on July 1st 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-06-15 06:41:45 (4 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 Lee Daniel	2026-05-16 23:55:23 (1 month ago)	104.252.191.130 - - [16/May/2026:19:55:21 -0400] "GET /https%3A/subzeroairconditioning.com/feed/ HTT ... show more 104.252.191.130 - - [16/May/2026:19:55:21 -0400] "GET /https%3A/subzeroairconditioning.com/feed/ HTTP/1.0" 404 43243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 104.252.191.130 - - [16/May/2026:19:55:21 -0400] "GET /https%3A/subzeroairconditioning.com/wp-content/plugins/LayerSlider/static/layerslider/css/layerslider.css%3Fver%3D6.6.4 HTTP/1.0" 404 43279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 104.252.191.130 - - [16/May/2026:19:55:21 -0400] "GET /https%3A/subzeroairconditioning.com/wp-content/plugins/airpro-plugin/extensions/smart-grid-gallery/includes/dist/sgg.min.css%3Fver%3D4.9.29 HTTP/1.0" 404 43270 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 104.252.191.130 - - [16/May/2026:19:55:21 -0400] "GET /https%3A/subzeroairconditioning.com/wp-content/plugins/airpro-pl ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-05-16 00:31:54 (1 month ago)	Try to access /https%3A/detjongerwerven.nl/xmlrpc.php%3Frsd	Web App Attack
🇩🇪 FeG Deutschland	2026-05-12 01:54:30 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2468	Exploited Host Web App Attack
Anonymous	2026-05-08 07:05:04 (1 month ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇨🇭 Origon	2026-05-06 06:34:06 (1 month ago)	http-probing - IP: 104.252.191.130 - time="2026-05-06T08:34:06+02:00" level=info msg="(555f66b4f6a7 ... show more http-probing - IP: 104.252.191.130 - time="2026-05-06T08:34:06+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.252.191.130 (US/9009) : 4h ban on Ip 104.252.191.130" module=db show less	Web App Attack
🇺🇸 LotPhantom	2026-05-02 09:54:27 (1 month ago)	104.252.191.130 - - [02/May/2026:09:53:27 +0000] "GET /api/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Window ... show more 104.252.191.130 - - [02/May/2026:09:53:27 +0000] "GET /api/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇦 dispensight	2026-05-02 01:20:04 (1 month ago)	Server-Side Request Forgery (SSRF) probe: requested URL-encoded localhost ngrok inspector paths (htt ... show more Server-Side Request Forgery (SSRF) probe: requested URL-encoded localhost ngrok inspector paths (http%3A/127.0.0.1%3A4040/inspect/http, http%3A/127.0.0.1%3A4041/inspect/http) plus /api/status and /login. M247 Europe SRL. show less	Web App Attack
🇩🇪 sec_af	2026-04-30 07:30:19 (1 month ago)	Automated web scanner detected on prod215. 26 suspicious HTTP requests (403/404/503) within 10 minut ... show more Automated web scanner detected on prod215. 26 suspicious HTTP requests (403/404/503) within 10 minutes. Scanning for config files (.env, .git), PHP shells, CMS vulnerabilities. Network: EGN-21 104.252.0.0 - 104.253.255.255. Blocked at firewall + Varnish level. show less	Brute-Force Web App Attack
🇳🇱 ParaBug	2026-04-19 20:40:10 (1 month ago)	104.252.191.130 - - [19/Apr/2026:22:40:09 +0200] "GET /https%3A/www.antik-wagon.com/ HTTP/1.1" 301 6 ... show more 104.252.191.130 - - [19/Apr/2026:22:40:09 +0200] "GET /https%3A/www.antik-wagon.com/ HTTP/1.1" 301 683 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" ... show less	Phishing Brute-Force Web App Attack
🇫🇷 Octopuce	2026-04-19 06:22:08 (2 months ago)	Aggressive web search of vulnerable pages: /blog/https%3A/litote.org/blog/ /blog/https%3A/litote.org ... show more Aggressive web search of vulnerable pages: /blog/https%3A/litote.org/blog/ /blog/https%3A/litote.org/blog/billets/ /blog/https%3A/litote.org/bl ... show less	Web App Attack
🇩🇪 LRob.fr	2026-04-18 15:45:05 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 Charlesiv	2026-04-17 06:40:41 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 9009 (M247) ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 9009 (M247) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-04-17T04:36:08Z Ray ID: 9ed8ba1f197b5cb9 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 gnom4ik	2026-03-31 15:30:23 (2 months ago)	ban-reviewer auto report; ip=104.252.191.130; scenario=http:scan; verdict=valid_ban; confidence=0.90 ... show more ban-reviewer auto report; ip=104.252.191.130; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=scanned 23 ports in 1m show less	Port Scan Hacking Brute-Force
🇺🇸 Rip	2026-03-20 17:59:06 (2 months ago)	Automated recon attempt targeting restricted and sensitive paths.	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇵🇭 206.62.40.85

🇳🇱 204.76.203.49

🇹🇳 197.5.145.102

🇸🇪 193.151.189.160

🇬🇧 35.203.210.54

🇮🇳 34.93.128.179

🇳🇱 195.178.110.30

🇰🇷 125.142.37.91

🇮🇩 103.154.77.48

🇺🇸 103.143.10.140

🇻🇳 59.153.220.168

🇲🇽 201.144.250.36

🇺🇸 173.239.211.41

🇺🇸 167.99.119.225

🇨🇮 105.235.68.13

🇺🇸 43.130.110.130

🇨🇳 219.128.15.190

🇹🇳 197.28.24.125

🇺🇸 165.154.135.141