JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.62.36

104.207.62.36 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.62.36

Whois 104.207.62.36

IP Abuse Reports for 104.207.62.36:

This IP address has been reported a total of 131 times from 17 distinct sources. 104.207.62.36 was first reported on June 5th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2026-05-20 16:04:12 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 4server	2026-05-12 00:37:23 (1 month ago)	[TueMay1202:37:22.3834642026][security2:error][pid3383786:tid3383887][client104.207.62.36:0]ModSecur ... show more [TueMay1202:37:22.3834642026][security2:error][pid3383786:tid3383887][client104.207.62.36:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"eimeko.ch\"][uri\"/www.eimeko.ch/403.sh\"][unique_id\"agJ2Qkfi0j_R5JcWVwf7pgAAARE\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-05-03 18:52:18 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇨🇿 sweet_acid	2026-05-02 05:09:54 (1 month ago)	Local web evidence: family=path_probe; path=/.aws/credentials; enforce_count=10; active_ban_hits=0	Web App Attack
🇨🇭 4server	2026-04-30 18:19:31 (1 month ago)	[ThuApr3020:19:28.2888822026][security2:error][pid3675717:tid3676433][client104.207.62.36:0]ModSecur ... show more [ThuApr3020:19:28.2888822026][security2:error][pid3675717:tid3676433][client104.207.62.36:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hosting-ticino-svizzera-ch.ticino-hosting.ch\"][uri\"/.env\"][unique_id\"afOdMFxWKRNeYFxiNCNPYgAAARI\"] show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-29 22:03:11 (1 month ago)	Auto-ban: >3000 req/min op 2026-04-29	Web App Attack SSH Hacking
🇬🇧 poundawebsiteltd	2026-04-28 02:42:38 (1 month ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.62.36 - - [28/Apr/2026:0 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.62.36 - - [28/Apr/2026:03:42:36 +0100] GET / HTTP/1.1 403 3107 - Mozilla/5.0 (X11; Linux i686; rv:25.0) Gecko/20100101 Firefox/25.0 show less	Web App Attack
Anonymous	2025-12-21 11:45:29 (5 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:25:48 (6 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇧🇪 cmbplf	2025-12-14 04:03:37 (6 months ago)	2.596 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 06:21:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:20:55.501248 2025] [security2:error] [pid 2465659:tid 2465659] [client 104.207.62.36:56513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aromatherapyricebags.com"] [uri "/.git/HEAD"] [unique_id "aSacR_FE55OctXgDJRr3rwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:57:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:57:12.974312 2025] [security2:error] [pid 16710:tid 16710] [client 104.207.62.36:26931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ourhumanfamily.org"] [uri "/.git/HEAD"] [unique_id "aSZ6mDvwEeCybtHpjyHygwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:21:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:21:32.967495 2025] [security2:error] [pid 26148:tid 26148] [client 104.207.62.36:16941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.web-dojo.pellman-world.com"] [uri "/.git/HEAD"] [unique_id "aSZyPFxr9rJDWMP32FOTggAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:04:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:04:47.749874 2025] [security2:error] [pid 2584:tid 2584] [client 104.207.62.36:37913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.testrong.com"] [uri "/.svn/wc.db"] [unique_id "aSZuT6f_9RagNpISB03YTAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-25 18:40:05 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.41

🇺🇸 147.185.132.83

🇳🇱 83.168.106.26

🇺🇸 20.29.116.172

🇷🇴 2.57.121.25

🇺🇸 208.109.52.213

🇺🇸 205.210.31.80

🇨🇳 183.202.251.135

🇺🇸 162.216.150.137

🇺🇸 172.202.117.125

🇩🇪 167.94.146.47

🇰🇷 112.216.129.27

🇳🇱 51.158.248.122

🇧🇷 43.164.192.38

🇳🇱 195.178.110.113

🇨🇳 182.138.158.109

🇨🇳 120.216.220.14

🇫🇮 80.223.192.112

🇺🇸 66.132.195.80

🇨🇳 223.107.233.71