AbuseIPDB » 195.63.3.217
195.63.3.217 was found in our database!
This IP was reported 8 times. Confidence of
Abuse
is 23% : ?
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
๐บ๐ธ
United States of America
City
Ashburn, Virginia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 195.63.3.217 :
This IP address has been reported a total of
8
times from
5 distinct
sources.
195.63.3.217 was first reported on
March 2nd 2026 , and the most recent report was
38 minutes ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฎ๐ช
AutosOnShow
2026-10-17 05:41:13
(38 minutes ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-17 05:40:44.740 |
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-10-17 03:15:16
(3 hours ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-17 03:14:27.427 |
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-10-16 06:33:21
(23 hours ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-16 06:32:56.974 |
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-10-15 19:48:15
(1 day ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-15 19:47:42.822 |
Web App Attack
๐ฏ๐ต
pixelboost.kr
2026-10-15 01:46:13
(2 days ago)
195.63.3.217 - - [15/Oct/2026:10:46:12 +0900] "POST http://176.34.47.14/ HTTP/1.1" 444 0 "-" "Mozill ...
show more
195.63.3.217 - - [15/Oct/2026:10:46:12 +0900] "POST http://176.34.47.14/ HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-09-30 11:37:52
(2 weeks ago)
[Wed Sep 30 21:37:50.707479 2026] [security2:error] [pid 375776] [client 195.63.3.217:57716] [client ...
show more
[Wed Sep 30 21:37:50.707479 2026] [security2:error] [pid 375776] [client 195.63.3.217:57716] [client 195.63.3.217] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/"] [unique_id "arz0jUSXSOnU9-MFZzkXsgAAAAA"]
...
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-25 06:43:56
(1 month ago)
cloudlinux2 fail2ban: 2026-08-25 08:39:22,343 fail2ban.filter [1464]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-25 08:39:22,343 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.95.199 - 2026-08-25 08:39:21cloudlinux2 fail2ban: 2026-08-25 08:39:23,838 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.89.183 - 2026-08-25 08:39:23cloudlinux2 fail2ban: 2026-08-25 08:39:21,664 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.1.181 - 2026-08-25 08:39:21cloudlinux2 fail2ban: 2026-08-25 08:39:23,070 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.88.131 - 2026-08-25 08:39:22cloudlinux2 fail2ban: 2026-08-25 08:39:26,417 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.24.203 - 2026-08-25 08:39:26cloudlinux2 fail2ban: 2026-08-25 08:39:25,644 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.75.120 - 2026-08-25 08:39:24cloudlinux2 fail2ban: 2026-08-25 08:40:14,553 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.3.217 - 2026-08-25 08:40:14clo
show less
Web App Attack
๐ธ๐ช
peterh
2026-03-02 09:36:00
(7 months ago)
195.63.3.217 - - [02/Mar/2026:01:09:21 +0100] "GET /wp-login.php HTTP/1.1" 404 210 "-" "Mozilla/5.0 ...
show more
195.63.3.217 - - [02/Mar/2026:01:09:21 +0100] "GET /wp-login.php HTTP/1.1" 404 210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
show less
Brute-Force
Web App Attack
Hacking
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: