JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.71

104.207.63.71 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.71

Whois 104.207.63.71

IP Abuse Reports for 104.207.63.71:

This IP address has been reported a total of 127 times from 21 distinct sources. 104.207.63.71 was first reported on June 11th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-06-03 15:19:19 (4 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-05-31 07:50:12 (1 week ago)	(y4) Failed scan -byebye- from 104.207.63.71 (FR/France/-): (CF_ENABLE)	Hacking
🇫🇷 pm33	2026-05-29 02:58:46 (1 week ago)	Wordpress login attempts	Brute-Force
🇳🇱 jjnxpct	2026-02-20 04:53:49 (3 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env.local (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env.local] show less	Web App Attack Hacking
🇬🇧 Axel	2026-02-19 01:36:52 (3 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-02-18 23:09:10 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 18:09:04.992297 2026] [security2:error] [pid 13910:tid 13910] [client 104.207.63.71:49619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vendor21.com"] [uri "/wp/.git/config"] [unique_id "aZZGkMWjh4gFd1E6qejJcQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 20:15:24 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:15:20.236457 2026] [security2:error] [pid 26872:tid 26872] [client 104.207.63.71:60341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transportadoresaereos.com"] [uri "/backend/.env"] [unique_id "aZYd2Ofj0w3_z0M33vwRJgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:50:39 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:50:35.367465 2026] [security2:error] [pid 5340:tid 5340] [client 104.207.63.71:24183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendywonjungkim.com"] [uri "/wp/.git/config"] [unique_id "aZW1mwoXrolqEBCo5m14qgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 02:30:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:30:03.261598 2026] [security2:error] [pid 5576:tid 5576] [client 104.207.63.71:53851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renperfco.com"] [uri "/v2/.git/config"] [unique_id "aZUkKyx_kl6x9KI1_K50RgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (5 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇮🇹 Rosh	2025-10-17 09:20:17 (7 months ago)	[10/17/25 11:20:16] SSH: illegal login attempts	Brute-Force SSH
Anonymous	2025-10-05 07:24:45 (8 months ago)	Probing for Open Source CMS installs	Hacking Brute-Force
Anonymous	2025-04-07 03:23:15 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 19:17:10 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 21:24:21 (1 year ago)	Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇱🇧 213.204.67.56

🇳🇱 176.65.139.11

🇩🇿 154.255.191.201

🇧🇬 91.191.209.118

🇨🇦 72.251.5.58

🇨🇳 222.176.201.39

🇺🇸 209.85.219.73

🇨🇳 182.138.158.178

🇨🇳 182.119.224.2

🇨🇳 119.45.42.34

🇻🇳 103.149.28.157

🇺🇸 91.230.168.186

🇺🇸 91.230.168.143

🇳🇱 52.174.67.71

🇳🇱 45.198.224.18

🇵🇾 45.161.237.218

🇺🇸 8.230.109.97

🇺🇸 3.22.171.104

🇨🇳 220.197.78.220