JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.194

104.207.63.194 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 33%: ?

33%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.194

Whois 104.207.63.194

IP Abuse Reports for 104.207.63.194:

This IP address has been reported a total of 167 times from 30 distinct sources. 104.207.63.194 was first reported on June 6th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-09-14 16:38:03 (5 days ago)	Wordfence waf block on parsol	Web App Attack
Anonymous	2026-09-10 23:59:07 (1 week ago)	2026-09-10T23:59:07.085755+00:00 instance-20260804-1025 wordpress(acbp.org.co)[2374270]: XML-RPC aut ... show more 2026-09-10T23:59:07.085755+00:00 instance-20260804-1025 wordpress(acbp.org.co)[2374270]: XML-RPC authentication attempt for unknown user supe1User10 from 104.207.63.194 ... show less	Web App Attack
Anonymous	2026-09-05 14:27:26 (2 weeks ago)	Kritik Bal Küpü (Honeypot) Tuzağı Tetiklendi (/wp-login.php). Subnet karantinaya alındı.	Hacking Web App Attack
🇺🇸 drewf.ink	2026-09-04 11:43:57 (2 weeks ago)	[11:43] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [11:43] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇸🇪 OnTheEdge	2026-09-03 23:47:09 (2 weeks ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
Anonymous	2026-09-03 21:13:56 (2 weeks ago)	2026-09-03T23:13:56.181990+02:00 polaris wp(bikeschool.co.za)[1031358]: Authentication attempt for u ... show more 2026-09-03T23:13:56.181990+02:00 polaris wp(bikeschool.co.za)[1031358]: Authentication attempt for unknown user pgslot from 104.207.63.194 ... show less	Brute-Force Web App Attack
Anonymous	2026-06-26 13:44:51 (2 months ago)	Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.	Web App Attack
🇦🇺 oncord	2026-03-09 09:09:11 (6 months ago)	Form spam	Web Spam
🇳🇱 Futunk	2026-02-18 09:09:01 (7 months ago)	Form spam (honeypot): POST /contact	Web Spam
🇨🇭 backslash	2026-02-15 01:30:04 (7 months ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇳🇱 homeshowdomain.nl	2026-02-13 22:59:29 (7 months ago)	Auto-ban: >3000 req/min op 2026-02-13	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-13 09:10:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:10:01.014044 2026] [security2:error] [pid 7020:tid 7047] [client 104.207.63.194:63041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/config/.env"] [unique_id "aY7qafAxSgCXV6M-D16tRQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:48:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:48:34.174306 2026] [security2:error] [pid 28396:tid 28396] [client 104.207.63.194:57493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakesideshelving.com"] [uri "/app/.env"] [unique_id "aY7lYvAbMP6fIn24Z10u-gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:25:19 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:25:15.669253 2026] [security2:error] [pid 27224:tid 27224] [client 104.207.63.194:38191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/frontend/.env"] [unique_id "aY61u-aYRlRHPeyH9zazjwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-13 05:06:12 (7 months ago)	Scanning/Probing (11)	Brute-Force Web App Attack

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.9.49

🇷🇴 193.32.162.9

🇺🇸 184.186.73.118

🇵🇰 182.188.24.243

🇨🇳 111.63.191.250

🇮🇳 103.199.203.67

🇩🇪 94.26.106.74

🇺🇸 91.230.168.126

🇱🇹 62.60.130.249

🇲🇾 47.254.235.10

🇸🇬 43.128.81.242

🇭🇰 42.200.66.164

🇭🇰 8.210.21.137

🇺🇸 2607:f298:5:117b::549:6e6e

🇺🇸 172.236.102.250

🇺🇸 172.234.199.134

🇺🇸 172.104.215.178

🇭🇰 118.26.37.105

🇻🇳 117.0.106.33

🇫🇷 86.209.203.37