JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.47

104.207.63.47 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.47

Whois 104.207.63.47

IP Abuse Reports for 104.207.63.47:

This IP address has been reported a total of 146 times from 21 distinct sources. 104.207.63.47 was first reported on June 18th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-12 11:15:28 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-11 09:11:43 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:42:52 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 solution.it	2026-04-25 15:07:30 (1 month ago)	[Sat Apr 25 17:07:29.775439 2026] [php7:error] [pid 2477358:tid 2477358] [client 104.207.63.47:59283 ... show more [Sat Apr 25 17:07:29.775439 2026] [php7:error] [pid 2477358:tid 2477358] [client 104.207.63.47:59283] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-04-23 13:05:19 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-23 11:13:18 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-19 22:22:16 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-18 23:46:52 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-13 10:13:12 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.63.47 (FR/France/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇩🇪 F242	2026-01-30 05:10:25 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 16:45:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 11:45:51.810367 2025] [security2:error] [pid 20244:tid 20244] [client 104.207.63.47:38865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "godcanuseyou.com"] [uri "/.svn/wc.db"] [unique_id "aTMMP-1472pdwiGYyeGHpAAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:41:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:41:41.783171 2025] [security2:error] [pid 8155:tid 8180] [client 104.207.63.47:46967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barneysprecision.com"] [uri "/.env"] [unique_id "aTK25XxqsRXvxcFMc1ByiQAAAJU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 07:01:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:01:53.034464 2025] [security2:error] [pid 29765:tid 29765] [client 104.207.63.47:14631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realtorpaul.com"] [uri "/.env"] [unique_id "aTKDYXEgPl5j6XTZBZqF2AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 13:04:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 08:04:35.832054 2025] [security2:error] [pid 19298:tid 19298] [client 104.207.63.47:34369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kinderland-preschool.com"] [uri "/.svn/wc.db"] [unique_id "aShMY6MPHZIMvumOqLTtogAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-11-26 23:24:26 (6 months ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.216.193.148

🇸🇪 185.195.236.81

🇲🇾 175.143.16.244

🇱🇹 81.30.98.158

🇧🇬 79.124.62.134

🇺🇸 204.136.11.161

🇺🇾 190.132.236.4

🇨🇳 101.249.62.184

🇬🇧 195.206.182.220

🇺🇸 172.182.211.88

🇸🇬 128.106.8.185

🇫🇷 89.116.27.130

🇩🇴 45.172.153.100

🇨🇳 14.103.120.70

🇮🇪 3.250.130.178

🇧🇷 201.18.68.42

🇨🇳 182.244.0.150

🇮🇳 165.22.208.252

🇺🇸 162.216.149.10

🇮🇩 103.172.20.218