JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.230

104.207.63.230 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.230

Whois 104.207.63.230

IP Abuse Reports for 104.207.63.230:

This IP address has been reported a total of 126 times from 18 distinct sources. 104.207.63.230 was first reported on June 6th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-05-13 21:50:14 (4 weeks ago)	Kingcopy(AI-IDS):IP does Multiple AWS Environment Abuse	Hacking Web App Attack
🇩🇪 4server	2026-05-13 18:37:48 (4 weeks ago)	[WedMay1320:37:45.7902382026][security2:error][pid2068188:tid2068249][client104.207.63.230:0]ModSecu ... show more [WedMay1320:37:45.7902382026][security2:error][pid2068188:tid2068249][client104.207.63.230:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".db\"][severity\"ERROR\"][hostname\"tourkomanis.ch\"][uri\"/.svn/wc.db\"][unique_id\"agTE-YFhIfnu9a2jyRmv5QAAAFY\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 03:49:37 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 23:49:31.172955 2026] [security2:error] [pid 28047:tid 28047] [client 104.207.63.230:25581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbuttbikini.com"] [uri "/.env"] [unique_id "agP0y00x79aP9Z7sORFSQgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-05-10 12:29:16 (1 month ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇬🇧 Apache	2026-04-08 22:26:37 (2 months ago)	(mod_security) mod_security (id:210410) triggered by 104.207.63.230 (FR/France/-): 5 in the last 300 ... show more (mod_security) mod_security (id:210410) triggered by 104.207.63.230 (FR/France/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-20 08:54:53 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 03:54:45.798065 2026] [security2:error] [pid 4388:tid 4388] [client 104.207.63.230:30415] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lozzy.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lozzy.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZghVf5CTrZaN2kExnAVlgAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 F242	2026-01-30 05:15:51 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 03:39:20 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:39:14.941668 2026] [security2:error] [pid 24857:tid 24857] [client 104.207.63.230:13339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thepianosmith.com"] [uri "/.env"] [unique_id "aWsEYldXpakv05PbpAskMQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 03:16:55 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:16:48.746297 2026] [security2:error] [pid 5942:tid 5942] [client 104.207.63.230:28867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southshorestreetrods.com"] [uri "/.env"] [unique_id "aWr_IDtH2JqnzFEMlB-5uwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 19:59:40 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 14:59:35.221679 2026] [security2:error] [pid 9867:tid 9867] [client 104.207.63.230:50411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.davidsonmanagement.net"] [uri "/.env"] [unique_id "aWqYpxCcucuZI5uC9SzxsgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-11 20:52:58 (6 months ago)	botnet	DDoS Attack
🇫🇷 applemooz	2025-11-01 12:33:28 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2025-10-30 14:25:54 (7 months ago)	WordPress Brute Force	Brute-Force
Anonymous	2025-04-07 03:57:47 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 15:01:06 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 212.135.208.17

🇩🇪 167.94.146.32

🇺🇸 162.217.165.234

🇺🇸 162.216.149.126

🇮🇳 45.79.123.76

🇰🇷 1.241.64.237

🇺🇸 206.223.228.197

🇸🇬 206.189.154.9

🇨🇳 171.37.190.122

🇷🇴 92.118.39.236

🇱🇹 45.227.254.170

🇫🇷 207.180.221.143

🇺🇸 204.152.192.237

🇫🇷 91.196.152.177

🇱🇻 83.99.206.11

🇧🇬 79.124.62.126

🇺🇸 66.132.195.46

🇳🇱 45.148.10.147

🇫🇮 37.27.214.143

🇧🇾 212.98.167.185