JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.63.24.41

195.63.24.41 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.63.24.41

Whois 195.63.24.41

IP Abuse Reports for 195.63.24.41:

This IP address has been reported a total of 11 times from 7 distinct sources. 195.63.24.41 was first reported on March 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-08-24 14:29:09 (1 day ago)	cloudlinux2 fail2ban: 2026-08-24 16:25:30,194 fail2ban.actions [1464]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-24 16:25:30,194 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Unban 178.153.255.42cloudlinux2 fail2ban: 2026-08-24 16:25:34,264 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.16.243 - 2026-08-24 16:25:34cloudlinux2 fail2ban: 2026-08-24 16:25:35,487 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.78.22 - 2026-08-24 16:25:35cloudlinux2 fail2ban: 2026-08-24 16:25:38,311 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.14.117 - 2026-08-24 16:25:37cloudlinux2 fail2ban: 2026-08-24 16:25:36,930 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.73.186 - 2026-08-24 16:25:36cloudlinux2 fail2ban: 2026-08-24 16:25:46,327 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.15.137 - 2026-08-24 16:25:45cloudlinux2 fail2ban: 2026-08-24 16:25:44,726 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.83.253 - 2026-08-24 16:25:44cloudlinux2 fail2ban: 20 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 00:53:21 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 195.63.24.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.24.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 20:53:13.482555 2026] [security2:error] [pid 1860019:tid 1860019] [client 195.63.24.41:47948] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|salernospizza.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "salernospizza.com"] [uri "/wp-login.php"] [unique_id "anUseVDZEU-LUIT-2NS1FAAAAAM"], referer: https://salernospizza.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-01 13:58:05 (1 month ago)	Wordfence waf block on robdarnell	Web App Attack
🇦🇺 MAGIC	2026-06-27 04:10:23 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 lostswordfish.com	2026-06-01 13:58:05 (2 months ago)	Wordfence waf block on robdarnell	Web App Attack
🇺🇸 nationaleventpros.com	2026-05-30 19:18:09 (2 months ago)	WordPress login attempt	Brute-Force
🇺🇸 lostswordfish.com	2026-05-25 10:38:05 (3 months ago)	Wordfence waf block on robdarnell	Web App Attack
🇨🇭 backslash	2026-05-23 05:09:08 (3 months ago)		Bad Web Bot
🇨🇦 polycoda	2026-03-11 15:27:03 (5 months ago)	📄 Probes for wp-login.php and other inexistent URLs	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 14:53:02 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.24.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.24.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 10:52:55.041034 2026] [security2:error] [pid 16214:tid 16214] [client 195.63.24.41:46760] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.maffiniandbearce.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.maffiniandbearce.com"] [uri "/wp-login.php"] [unique_id "abGBxzEt1omllRe4VuVOAwAAABU"], referer: https://www.maffiniandbearce.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 09:14:29 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 195.63.24.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 195.63.24.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 04:14:22.758534 2026] [security2:error] [pid 21537:tid 21537] [client 195.63.24.41:49786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|justiart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "justiart.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaf37nNnuvOE8UD4TyUENAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.11

🇺🇸 104.131.174.122

🇩🇪 69.5.169.163

🇺🇸 45.56.108.243

🇨🇳 43.248.108.189

🇺🇸 34.136.66.38

🇺🇸 20.102.117.131

🇨🇳 220.243.133.81

🇩🇪 213.209.159.239

🇺🇸 205.210.31.100

🇺🇸 205.210.31.53

🇺🇸 195.184.76.116

🇺🇸 195.184.76.11

🇺🇸 195.184.76.3

🇨🇳 124.114.150.86

🇻🇳 103.104.121.9

🇸🇬 94.231.206.132

🇺🇸 92.204.128.149

🇳🇱 86.54.31.32

🇫🇷 85.217.140.52