JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.132

104.207.63.132 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.132

Whois 104.207.63.132

IP Abuse Reports for 104.207.63.132:

This IP address has been reported a total of 129 times from 16 distinct sources. 104.207.63.132 was first reported on June 18th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ShadowWhisperer	2026-05-21 05:59:04 (3 weeks ago)	DOCKER port scan / probe. GET /secrets	Port Scan
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:24 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-26 08:48:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:48:36.201053 2025] [security2:error] [pid 4970:tid 4970] [client 104.207.63.132:39793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kneupper.com"] [uri "/.git/HEAD"] [unique_id "aSa-5Ir9NET6xWTjL9qu0AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:28:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:28:40.380122 2025] [security2:error] [pid 25393:tid 25393] [client 104.207.63.132:51071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ratalads.com"] [uri "/.git/HEAD"] [unique_id "aSaeGIFSZNRLpzXXuN8IAwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:06:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:05:59.900491 2025] [security2:error] [pid 17609:tid 17609] [client 104.207.63.132:16789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kirbysmw.com"] [uri "/.env"] [unique_id "aSZul3el8Q974Aft5x3sOQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:15:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:15:33.237331 2025] [security2:error] [pid 32160:tid 32160] [client 104.207.63.132:16853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mbehel.com"] [uri "/.env"] [unique_id "aSZixZe4xx4PSmIXKR8MMQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:09:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:09:08.354906 2025] [security2:error] [pid 6633:tid 6633] [client 104.207.63.132:52925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.oaklands1.com"] [uri "/.svn/wc.db"] [unique_id "aSZTNKFVQrFqd0fP2AC4mgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2025-11-26 00:28:59 (6 months ago)	[2025-11-26 02:28:59] Probing for dotfiles "GET /.env HTTP/1.1" 301	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:21:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:21:34.124886 2025] [security2:error] [pid 9137:tid 9137] [client 104.207.63.132:31901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.whaletailpuckerbutt.com"] [uri "/.svn/wc.db"] [unique_id "aSP5bh5Vd1m6DHhfDkrg4AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-16 11:48:21 (7 months ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-10-11 06:37:29 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 13:28:02 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 21:39:40 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 21:50:56 (8 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 21:12:21 (1 year ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 114.67.232.93

🇫🇷 91.231.89.167

🇺🇸 64.62.197.62

🇧🇪 34.77.37.40

🇮🇷 2.180.79.248

🇳🇱 141.11.32.173

🇧🇷 35.199.87.128

🇺🇸 34.162.12.88

🇨🇳 14.103.127.2

🇺🇸 2001:470:2cc:1::17f

🇮🇷 217.218.249.122

🇺🇸 174.77.111.220

🇻🇳 171.244.141.86

🇺🇸 152.32.207.179

🇮🇳 123.108.206.3

🇺🇸 91.230.168.119

🇱🇹 81.30.98.49

🇷🇺 62.109.29.227

🇺🇸 34.162.92.249

🇹🇷 31.141.222.222