JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.111

104.207.63.111 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.111

Whois 104.207.63.111

IP Abuse Reports for 104.207.63.111:

This IP address has been reported a total of 118 times from 12 distinct sources. 104.207.63.111 was first reported on June 5th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇮🇹 VHosting	2025-12-24 06:40:14 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (5 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-12-02 22:41:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:41:24.147805 2025] [security2:error] [pid 18533:tid 18533] [client 104.207.63.111:48349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beachcitytshirts.com"] [uri "/.env"] [unique_id "aS9rFAYqz9WO6Qd0yTQQAQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:38:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:38:05.764978 2025] [security2:error] [pid 4400:tid 4400] [client 104.207.63.111:12341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amybeam.com"] [uri "/.git/HEAD"] [unique_id "aS9AHZnME0FAZ_JiSzoYiQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:50:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:50:08.306370 2025] [security2:error] [pid 17167:tid 17167] [client 104.207.63.111:22937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildfarmer.com"] [uri "/.git/HEAD"] [unique_id "aS5-EBQrPM5jRnlh6errZgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:17:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:17:55.290786 2025] [security2:error] [pid 19443:tid 19455] [client 104.207.63.111:55609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magnumxl.com"] [uri "/.env"] [unique_id "aS52gzufS__gaNU5_bPMkAAAAQo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2025-12-02 00:53:46 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇬🇧 oncord	2025-11-20 14:21:38 (6 months ago)	Form spam	Web Spam
Anonymous	2025-10-19 01:21:08 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 23:28:36 (7 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.18 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 23:25:39 (1 year ago)	104.207.63.111 - - [08/Apr/2025:01:25:38 +0200] "GET /index.php?page_id=home%27 HTTP/1.1" 403 363 "- ... show more 104.207.63.111 - - [08/Apr/2025:01:25:38 +0200] "GET /index.php?page_id=home%27 HTTP/1.1" 403 363 "-" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2025-04-07 00:29:32 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 16:43:57 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 21:39:53 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.121

🇩🇪 43.228.157.9

🇺🇸 207.241.173.57

🇪🇸 196.196.150.6

🇮🇩 182.8.182.229

🇺🇸 152.32.205.206

🇺🇸 143.198.171.91

🇺🇬 129.205.2.18

🇵🇰 103.164.9.74

🇺🇸 100.49.117.77

🇷🇴 92.118.39.62

🇫🇷 91.231.89.109

🇭🇰 65.181.79.60

🇱🇹 62.212.199.164

🇨🇳 27.18.78.146

🇺🇸 209.141.46.157

🇧🇪 198.235.24.196

🇩🇪 167.94.146.38

🇺🇸 150.107.38.56

🇮🇳 103.109.222.22