JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.63.20.96

195.63.20.96 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.63.20.96

Whois 195.63.20.96

IP Abuse Reports for 195.63.20.96:

This IP address has been reported a total of 12 times from 7 distinct sources. 195.63.20.96 was first reported on March 10th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-10-13 06:25:06 (3 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-13 06:24:30.709 \|	Web App Attack
🇮🇪 AutosOnShow	2026-10-13 01:19:06 (4 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-13 01:18:05.400 \|	Web App Attack
🇦🇺 Bay13	2026-10-11 21:34:33 (5 days ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇺🇸 CollideTech	2026-10-11 08:02:29 (5 days ago)	found poking around where they should not be	Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-10-10 08:08:05 (6 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-10 08:07:34.629 \|	Web App Attack
🇮🇪 AutosOnShow	2026-10-09 21:38:05 (1 week ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-10-09 21:37:43.410 \|	Web App Attack
🇲🇽 octageeks.com	2026-10-07 04:12:11 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 kosada.com	2026-09-20 08:29:31 (3 weeks ago)	Repeated exploit attempts, for example: / author_exclude=1111111100000000111111110000000011111111000 ... show more Repeated exploit attempts, for example: / author_exclude=11111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000001111111100000000111111110000000011111111000000... (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.34 Safari/537.36") show less	Web App Attack
🇬🇧 pinguin	2026-09-20 06:22:46 (3 weeks ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇪 AutosOnShow	2026-09-02 19:53:04 (1 month ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-09-02 19:52:31.543 \|	Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 02:03:02 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.20.96 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.20.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 22:02:56.826530 2026] [security2:error] [pid 21266:tid 21266] [client 195.63.20.96:35044] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tedharris.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tedharris.com"] [uri "/wp-login.php"] [unique_id "aa970EaALi6pWBREIzJM7wAAAAk"], referer: https://tedharris.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 01:32:05 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.20.96 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.20.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 21:31:57.424545 2026] [security2:error] [pid 26452:tid 26452] [client 195.63.20.96:44152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|interiorsolutions-stuart.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "interiorsolutions-stuart.com"] [uri "/wp-login.php"] [unique_id "aa90jU_bTv5oZD9UerhzpwAAAAo"], referer: https://interiorsolutions-stuart.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a0f:ca80:b00b:9346::5

🇺🇸 192.3.179.148

🇬🇧 185.247.137.164

🇦🇹 150.251.225.229

🇺🇸 107.143.128.153

🇫🇷 93.22.204.190

🇺🇸 70.184.75.40

🇿🇦 69.67.32.66

🇳🇱 45.148.10.152

🇫🇷 217.182.253.249

🇬🇧 185.247.137.161

🇩🇪 185.73.23.161

🇰🇷 175.123.253.77

🇺🇸 172.180.64.124

🇭🇰 165.154.62.147

🇲🇽 140.84.171.210

🇰🇷 119.207.63.208

🇨🇳 117.31.217.34

🇫🇷 91.231.89.94

🇫🇷 91.196.152.124