JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.62.247

104.207.62.247 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.62.247

Whois 104.207.62.247

IP Abuse Reports for 104.207.62.247:

This IP address has been reported a total of 139 times from 24 distinct sources. 104.207.62.247 was first reported on June 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-19 12:06:36 (1 week ago)	Brute force	Brute-Force
🇫🇮 inlink.ltd	2026-05-15 06:34:19 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇮 as211431.net	2026-05-07 23:30:03 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /index.php UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-03-28 17:08:59 (2 months ago)	Forum/form spam	Web Spam
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 Carsten	2025-12-19 18:07:56 (6 months ago)	GET [wp//kickstart.php]	Port Scan
🇺🇸 TPI-Abuse	2025-11-25 03:33:26 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:33:19.528150 2025] [security2:error] [pid 15316:tid 15316] [client 104.207.62.247:39383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kotelbarmitzvah.com"] [uri "/.svn/wc.db"] [unique_id "aSUjf6CsDbaDF2HTHUz96gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:05:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:04:56.419813 2025] [security2:error] [pid 25357:tid 25357] [client 104.207.62.247:19417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kalvannaawards.com"] [uri "/.svn/wc.db"] [unique_id "aSUc2Koy_3OkgV5So3gheAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:10:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:10:49.564976 2025] [security2:error] [pid 26887:tid 26887] [client 104.207.62.247:26035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.leansixsigmatransformation.com"] [uri "/.svn/wc.db"] [unique_id "aSUQKYBG3dgT6jgI7UErPgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:12:16 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:12:11.799070 2025] [security2:error] [pid 20924:tid 20924] [client 104.207.62.247:27063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.conveyorizedovens.com"] [uri "/.git/HEAD"] [unique_id "aST0Wxi7djjE3Cb9kWl0MQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2025-11-24 23:57:23 (7 months ago)	2025-11-25 @ 00:57:23 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇵🇱 sefinek.net	2025-11-18 09:32:31 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 exxos	2025-11-03 11:52:45 (7 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 EGP Abuse Dept	2025-10-26 02:59:44 (8 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2025-04-07 04:14:36 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 168.197.250.14

🇯🇴 91.186.249.130

🇩🇪 91.3.203.96

🇱🇻 81.30.98.44

🇳🇱 45.148.10.121

🇩🇪 213.209.159.231

🇪🇸 200.234.232.177

🇲🇿 197.235.74.115

🇧🇷 186.227.63.10

🇨🇱 179.9.161.53

🇩🇪 167.94.146.34

🇩🇪 165.227.129.203

🇷🇴 151.242.30.212

🇷🇴 151.242.30.210

🇺🇸 141.148.33.145

🇺🇸 139.144.235.132

🇨🇳 111.61.176.245

🇳🇱 45.198.224.18

🇦🇪 2.51.126.70

🇨🇳 223.73.247.155