JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.157

104.207.63.157 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.157

Whois 104.207.63.157

IP Abuse Reports for 104.207.63.157:

This IP address has been reported a total of 132 times from 12 distinct sources. 104.207.63.157 was first reported on June 22nd 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-12 03:11:36 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 22:11:31.274138 2026] [security2:error] [pid 32662:tid 32662] [client 104.207.63.157:63025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artaria.us"] [uri "/.env.save"] [unique_id "aY1E42sC8suCyaJegdSYuAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2026-02-11 04:52:56 (4 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /test/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:55:46 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:55:39.311241 2026] [security2:error] [pid 21154:tid 21154] [client 104.207.63.157:16209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenmalone.com"] [uri "/new/.git/config"] [unique_id "aYpz-3CQqxeJYXJxVnvfmgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-09 22:59:08 (4 months ago)	Auto-ban: >3000 req/min op 2026-02-09	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-09 21:12:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:12:45.038521 2026] [security2:error] [pid 22193:tid 22193] [client 104.207.63.157:50119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horizonsoundchicago.com"] [uri "/config/.env"] [unique_id "aYpNzcF2BSbh1pyoI9-GSAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-21 11:07:38 (5 months ago)	Attempted brute force login to web vpn 164 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 164 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 21:38:05 (5 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.12.19 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-12-01 23:42:39 (6 months ago)	Attempted brute force login to web vpn 994 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 994 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 22:37:58 (6 months ago)	Attempted brute force login to web vpn 936 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 936 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 22:51:32 (6 months ago)	Attempted brute force login to web vpn 3607 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 3607 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 01:13:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:13:22.943283 2025] [security2:error] [pid 29737:tid 29737] [client 104.207.63.157:12547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kirt.us"] [uri "/.git/HEAD"] [unique_id "aSZUMjON4pJPS6rX_SgCjwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:52:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:52:06.847956 2025] [security2:error] [pid 32301:tid 32301] [client 104.207.63.157:27069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.accu-tuner.com"] [uri "/.env"] [unique_id "aSQqxvx81TTYWa7EaA1-PQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:33:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:33:26.654616 2025] [security2:error] [pid 27117:tid 27117] [client 104.207.63.157:14205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.judgehall.com"] [uri "/.env"] [unique_id "aSQmZlT4AucxF71Ve6cbawAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.191.48.6

🇲🇽 187.190.35.163

🇻🇳 171.231.186.156

🇺🇸 159.89.234.197

🇰🇪 105.160.87.84

🇺🇸 103.234.62.55

🇵🇰 103.173.7.225

🇩🇪 87.106.201.248

🇨🇦 85.217.149.12

🇫🇮 65.108.149.206

🇮🇳 49.36.213.167

🇮🇩 34.101.214.56

🇿🇦 197.185.166.79

🇳🇱 195.178.110.101

🇧🇷 187.0.238.211

🇭🇰 180.219.122.46

🇧🇷 179.108.80.158

🇳🇱 176.65.139.251

🇺🇸 172.216.252.8

🇨🇳 153.0.50.63