JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.92

104.207.63.92 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.92

Whois 104.207.63.92

IP Abuse Reports for 104.207.63.92:

This IP address has been reported a total of 123 times from 15 distinct sources. 104.207.63.92 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-01-18 07:00:12 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:55 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇵🇱 sefinek.net	2025-12-28 09:31:40 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-12-16 22:14:42 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 ki3	2025-12-11 14:13:41 (5 months ago)	Fail2Ban: Web App Attacks and Forum Spam 104.207.63.92 1765462420.0(JST)	Web Spam Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-12-11 00:05:56 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-27 18:51:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 13:51:09.654924 2025] [security2:error] [pid 8075:tid 8075] [client 104.207.63.92:24767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "45northoliveoil.com"] [uri "/.svn/wc.db"] [unique_id "aSidnYFKVYwZ1XOw_pkcyQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:28:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:28:12.976654 2025] [security2:error] [pid 13895:tid 13916] [client 104.207.63.92:32511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.landmarkocchealth.com"] [uri "/.svn/wc.db"] [unique_id "aSUwXMqATJ-N2rrGOLZ9CgAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:59:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:59:36.884639 2025] [security2:error] [pid 23301:tid 23301] [client 104.207.63.92:10095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.edgecombe.net"] [uri "/.svn/wc.db"] [unique_id "aSUpqExngQk0I6B-1ob7mQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:08:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:08:10.459953 2025] [security2:error] [pid 715189:tid 715189] [client 104.207.63.92:13093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.capitaz.com"] [uri "/.svn/wc.db"] [unique_id "aSUdmmcFhlHlhyzypNuy8AAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:11:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:11:50.971717 2025] [security2:error] [pid 5676:tid 5676] [client 104.207.63.92:28649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thomaschemical.net"] [uri "/.env"] [unique_id "aSUCVlM-GpN-NK_sPqu3tgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-07 11:09:19 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-30 15:15:13 (7 months ago)	WordPress Brute Force	Brute-Force
🇩🇪 ps-center	2025-10-27 04:14:24 (7 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
🇳🇱 WeCloudit-Anti-Abuse	2025-10-25 03:40:04 (7 months ago)	WAF: Block IP which is in the web-spammers RBL 2- server02	Email Spam Brute-Force

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 112.175.29.94

🇵🇱 85.128.143.135

🇹🇼 59.127.60.190

🇩🇪 213.209.159.56

🇧🇷 205.210.31.169

🇮🇹 188.152.238.126

🇦🇷 186.129.75.41

🇧🇷 177.74.188.179

🇩🇪 167.94.146.73

🇻🇳 160.250.186.97

🇺🇸 143.110.239.2

🇭🇰 103.210.238.204

🇨🇳 101.126.157.138

🇺🇸 66.132.195.15

🇨🇳 59.59.214.35

🇳🇱 45.148.10.147

🇨🇳 14.103.123.80

🇬🇧 2a02:4780:a:648:0:b09:2c8d:1

🇧🇪 2a02:2788:f4:47:165:7d8f:508c:87b5

🇳🇱 204.76.203.219