JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.20

104.207.63.20 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 27%: ?

27%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.20

Whois 104.207.63.20

IP Abuse Reports for 104.207.63.20:

This IP address has been reported a total of 83 times from 21 distinct sources. 104.207.63.20 was first reported on June 7th 2024, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-05 05:07:49 (20 hours ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇵🇱 sefinek.net	2026-05-26 04:12:06 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇱🇻 garmtech.com	2026-05-13 23:38:57 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-38.104.207.63.20.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-38.104.207.63.20.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇩 hermawan	2026-05-13 09:54:40 (3 weeks ago)	1778664720.423401 104.207.63.20 103.166.156.58 64240_2-4-8-1-3_1460_12 2026-05-13 16:32:00 WIB ...	Email Spam Hacking
🇱🇻 garmtech.com	2026-05-05 10:35:37 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-35.104.207.63.20.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-35.104.207.63.20.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-04 23:20:45 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-20.104.207.63.20.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-20.104.207.63.20.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇹 [email protected]	2026-04-17 23:00:34 (1 month ago)	[Sat Apr 18 01:00:33.841736 2026] [authz_core:error] [pid 560720:tid 560779] [remote 104.207.63.20:4 ... show more [Sat Apr 18 01:00:33.841736 2026] [authz_core:error] [pid 560720:tid 560779] [remote 104.207.63.20:44935] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇵🇱 sefinek.net	2026-01-26 06:27:36 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2026-01-06 00:13:45 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-01-04 23:43:32 (5 months ago)	Infected user bad webscan	Exploited Host
🇧🇪 madeit	2025-11-30 04:32:28 (6 months ago)		Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:38:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:37:55.606357 2025] [security2:error] [pid 18325:tid 18347] [client 104.207.63.20:10543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gfx-technology.com"] [uri "/.git/HEAD"] [unique_id "aSPhI7ibCkDUtlE56PAiGQAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:02:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:02:26.530104 2025] [security2:error] [pid 2215:tid 2229] [client 104.207.63.20:29293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.boracayboats.com"] [uri "/.svn/wc.db"] [unique_id "aSPKwoPKgioJ5cBCG_YIZgAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-06 18:07:51 (6 months ago)	Malicious Traffic/Form Submission	Phishing Web Spam
Anonymous	2025-04-07 03:26:37 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 212.154.234.9

🇭🇰 199.45.154.191

🇳🇱 185.136.15.10

🇳🇱 176.65.139.14

🇧🇩 103.183.62.3

🇧🇬 91.148.190.150

🇷🇴 80.94.92.184

🇹🇼 61.222.211.114

🇰🇷 58.229.253.119

🇳🇱 45.156.87.253

🇬🇧 35.203.211.45

🇺🇸 20.168.121.44

🇮🇩 210.79.191.61

🇧🇪 198.235.24.162

🇵🇰 162.4.163.145

🇨🇳 140.205.208.160

🇺🇸 132.226.107.83

🇮🇩 125.162.210.179

🇷🇴 92.118.39.236

🇩🇪 77.91.71.25