JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.116

104.207.63.116 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.116

Whois 104.207.63.116

IP Abuse Reports for 104.207.63.116:

This IP address has been reported a total of 117 times from 17 distinct sources. 104.207.63.116 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-04-06 00:52:41 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.116 (FR/France/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.116 (FR/France/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-02 05:49:39 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.116 (FR/France/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.116 (FR/France/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇱🇻 garmtech.com	2026-03-23 10:55:14 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇧🇪 cmbplf	2026-03-12 19:24:56 (2 months ago)	7.231 requests with url.path /xmlrpc.php 1.813 POST requests with url.path /wp-login.php	Brute-Force Bad Web Bot
🇳🇱 jjnxpct	2025-11-26 04:56:12 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/HEAD (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/HEAD] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:20:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:20:45.771599 2025] [security2:error] [pid 16288:tid 16288] [client 104.207.63.116:58013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.computerian.net"] [uri "/.git/HEAD"] [unique_id "aSVKvTHu5Jh3V-dO-26iZgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:38:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:29.666028 2025] [security2:error] [pid 18682:tid 18682] [client 104.207.63.116:51101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elitehomesfl.com"] [uri "/.env"] [unique_id "aSUyxabhtPSkfVWYQVW3AQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:41:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:41:33.004720 2025] [security2:error] [pid 8738:tid 8738] [client 104.207.63.116:34451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.asaint.net"] [uri "/.git/HEAD"] [unique_id "aSUXXaZNA5ILf2IOlLtSEgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2025-10-18 10:34:33 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-04-07 05:08:49 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 13:03:47 (1 year ago)	Attempted brute force login to web vpn 10 time(s); last attempt for 2025.04.06 is noted in report ti ... show more Attempted brute force login to web vpn 10 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:26:25 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 23:11:55 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 14:32:56 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 20:26:37 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.197

🇺🇸 166.247.125.61

🇩🇪 155.117.127.153

🇧🇩 103.177.150.155

🇺🇸 66.132.172.236

🇮🇳 59.96.139.43

🇻🇳 45.117.177.47

🇭🇰 203.83.11.211

🇧🇴 190.129.122.185

🇨🇳 182.242.169.69

🇳🇱 176.65.148.84

🇸🇬 148.66.142.9

🇸🇬 118.194.233.253

🇱🇹 81.30.98.142

🇷🇴 80.94.92.184

🇩🇪 69.5.169.95

🇧🇪 34.38.175.130

🇬🇧 217.154.45.93

🇨🇳 175.160.99.94

🇸🇬 103.187.146.72