JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.24

104.207.63.24 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.24

Whois 104.207.63.24

IP Abuse Reports for 104.207.63.24:

This IP address has been reported a total of 80 times from 17 distinct sources. 104.207.63.24 was first reported on June 11th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Axel	2026-05-09 22:55:36 (4 weeks ago)	[2026-05-09 22:55:36 UTC] Honeypot WebLogic connection attempt \| AXFRA HONEYPOT	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 08:43:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:43:42.754509 2025] [security2:error] [pid 12540:tid 12540] [client 104.207.63.24:50171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.washburn-books.com"] [uri "/.svn/wc.db"] [unique_id "aSQavqZUTe2cAXsOd3YmNQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:04:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:04:01.648243 2025] [security2:error] [pid 11237:tid 11237] [client 104.207.63.24:31391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sandhage.com"] [uri "/.svn/wc.db"] [unique_id "aSQDYUHX77XYSOo_DbB_WwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:10:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:10:12.653933 2025] [security2:error] [pid 4133561:tid 4133575] [client 104.207.63.24:48939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.denverdermatologist.com"] [uri "/.git/HEAD"] [unique_id "aSP2xM6lE8qghk7QOEVaiwAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:21:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:21:02.221277 2025] [security2:error] [pid 28778:tid 28778] [client 104.207.63.24:53341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.crochetfreepatterns.com"] [uri "/.git/HEAD"] [unique_id "aSPdLh1Df5-pa-nmSZEaiQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-10-27 08:29:59 (7 months ago)	MYH: Web Attack POST /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2025-10-11 06:33:11 (7 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 21:59:25 (7 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 22:41:06 (7 months ago)	Attempted brute force login to web vpn 127 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 127 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 23:49:52 (7 months ago)	Attempted brute force login to web vpn 161 time(s); last attempt for 2025.10.08 is noted in report t ... show more Attempted brute force login to web vpn 161 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 22:02:58 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 12:39:09 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 03:51:40 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:37:58 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.103.62.205

🇷🇴 80.94.95.211

🇸🇬 209.97.169.32

🇻🇳 171.244.143.209

🇨🇳 119.123.133.126

🇷🇺 87.251.79.125

🇺🇸 50.6.228.32

🇨🇳 218.24.63.49

🇳🇱 176.65.139.232

🇺🇸 172.191.132.202

🇺🇸 52.5.232.250

🇸🇦 37.56.107.252

🇰🇷 218.150.184.241

🇷🇺 217.25.231.150

🇺🇸 209.126.107.84

🇧🇴 181.115.147.5

🇨🇳 106.13.174.45

🇺🇸 45.79.207.110

🇫🇮 37.27.34.32

🇨🇭 178.82.187.196