JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.246

104.207.63.246 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 26%: ?

26%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.246

Whois 104.207.63.246

IP Abuse Reports for 104.207.63.246:

This IP address has been reported a total of 122 times from 15 distinct sources. 104.207.63.246 was first reported on June 8th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-05-20 12:36:44 (2 weeks ago)	[WedMay2014:36:40.5902392026][security2:error][pid2630850:tid2630856][client104.207.63.246:0]ModSecu ... show more [WedMay2014:36:40.5902392026][security2:error][pid2630850:tid2630856][client104.207.63.246:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.comarcosa.com\"][uri\"/\"][unique_id\"ag2q2PA5UfCaD8ah2Pne2QAAAIQ\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-05-06 03:19:15 (1 month ago)	Port Scan detected from 104.207.63.246 (FR/France/-). 11 hits in the last 152 seconds (0-196)	Port Scan
🇨🇭 Origon	2026-05-02 01:38:26 (1 month ago)	http-bad-user-agent - IP: 104.207.63.246 - time="2026-05-02T03:38:25+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 104.207.63.246 - time="2026-05-02T03:38:25+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 104.207.63.246 (FR/200373) : 4h ban on Ip 104.207.63.246" module=db show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-04-30 21:50:39 (1 month ago)	Kingcopy(AI-IDS):IP does Multiple AWS Environment Abuse	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-29 22:02:18 (1 month ago)	Auto-ban: >3000 req/min op 2026-04-29	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-04-28 18:30:54 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 104.207.63.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.63.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 14:30:48.711020 2026] [security2:error] [pid 2974:tid 2974] [client 104.207.63.246:59787] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.howtolivegreener.com.easyweb-publishing.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.howtolivegreener.com.easyweb-publishing.com"] [uri "/s3cmd.ini"] [unique_id "afD82BPEafHDFiS72fmRLAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-27 01:36:14 (1 month ago)	Try to access /.aws/credentials	Web App Attack
🇵🇱 sefinek.net	2026-03-24 22:14:47 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-12-21 14:47:15 (5 months ago)	Attempted brute force login to web vpn 109 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 109 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 21:11:11 (5 months ago)	Attempted brute force login to web vpn 92 time(s); last attempt for 2025.12.19 is noted in report ti ... show more Attempted brute force login to web vpn 92 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-01 23:12:56 (6 months ago)	Attempted brute force login to web vpn 919 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 919 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:54:24 (6 months ago)	Attempted brute force login to web vpn 991 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 991 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:01:40 (6 months ago)	Attempted brute force login to web vpn 2613 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2613 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-18 22:45:06 (6 months ago)	Attempted brute force login to web vpn 305 time(s); last attempt for 2025.11.18 is noted in report t ... show more Attempted brute force login to web vpn 305 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
🇵🇱 sefinek.net	2025-09-30 18:21:35 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.83

172.16.200.16

🇮🇳 163.223.54.21

🇹🇼 111.70.23.230

🇹🇼 110.25.112.145

🇲🇾 103.6.245.158

🇷🇴 80.94.92.184

🇺🇸 45.63.4.69

🇷🇴 2.57.122.177

🇩🇪 213.209.159.225

🇺🇸 209.126.3.23

🇺🇬 196.0.120.211

🇨🇳 180.167.128.203

🇺🇸 172.234.218.34

🇸🇬 172.217.97.16

🇺🇸 162.216.149.175

🇺🇸 104.152.58.233

🇺🇸 76.33.59.41

🇬🇭 41.139.60.53

🇩🇪 2a00:1398:4:2a05:4e52:62ff:fe22:6c13