JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.63.30.73

195.63.30.73 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.63.30.73

Whois 195.63.30.73

IP Abuse Reports for 195.63.30.73:

This IP address has been reported a total of 10 times from 7 distinct sources. 195.63.30.73 was first reported on March 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-08-25 23:48:56 (1 day ago)	cloudlinux2 fail2ban: 2026-08-26 01:44:04,533 fail2ban.filter [1464]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-26 01:44:04,533 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 34.70.230.246 - 2026-08-26 01:44:04cloudlinux2 fail2ban: 2026-08-26 01:44:05,908 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Ban 34.70.230.246cloudlinux2 fail2ban: 2026-08-26 01:44:05,420 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 34.70.230.246 - 2026-08-26 01:44:05cloudlinux2 fail2ban: 2026-08-26 01:44:05,914 fail2ban.filter [1464]: INFO [recidive] Found 34.70.230.246 - 2026-08-26 01:44:05cloudlinux2 fail2ban: 2026-08-26 01:44:05,850 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 34.70.230.246 - 2026-08-26 01:44:05cloudlinux2 fail2ban: 2026-08-26 01:44:04,084 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 34.70.230.246 - 2026-08-26 01:44:04cloudlinux2 fail2ban: 2026-08-26 01:44:39,785 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.17.195 - 2026-08-26 01:44:39cloudlinux2 fail2ban: 2026-08- show less	Web App Attack
🇮🇹 CoreTech srl	2026-08-25 11:48:57 (1 day ago)	cloudlinux2 fail2ban: 2026-08-25 13:44:01,719 fail2ban.filter [1464]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-25 13:44:01,719 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.27.12 - 2026-08-25 13:44:01cloudlinux2 fail2ban: 2026-08-25 13:44:00,635 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.76.157 - 2026-08-25 13:44:00cloudlinux2 fail2ban: 2026-08-25 13:43:59,276 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.30.73 - 2026-08-25 13:43:59cloudlinux2 fail2ban: 2026-08-25 13:44:08,227 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 193.56.116.202 - 2026-08-25 13:44:07cloudlinux2 fail2ban: 2026-08-25 13:44:14,258 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.17.27 - 2026-08-25 13:44:13cloudlinux2 fail2ban: 2026-08-25 13:44:15,064 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.87.171 - 2026-08-25 13:44:14cloudlinux2 fail2ban: 2026-08-25 13:44:12,849 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.7.228 - 2026-08-25 13:44:12cloudl show less	Web App Attack
🇩🇪 FeG Deutschland	2026-08-24 19:09:52 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇩🇪 LRob	2026-08-11 00:53:05 (2 weeks ago)	WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gec ... show more WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0 show less	Brute-Force Web App Attack
Anonymous	2026-07-31 01:04:23 (3 weeks ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇨🇭 backslash	2026-06-15 18:51:02 (2 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇮🇩 Burayot	2026-04-17 12:04:16 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.63.30.73 (NL/Netherlands/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 195.63.30.73 (NL/Netherlands/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 16:43:33 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.30.73 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.30.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 12:43:27.501448 2026] [security2:error] [pid 11930:tid 11942] [client 195.63.30.73:20868] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kettlehill.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kettlehill.com"] [uri "/wp-login.php"] [unique_id "abBKL-DkrleIRMz6DuZt1AAAAUg"], referer: https://kettlehill.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 06:58:51 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.30.73 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.30.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 02:58:43.870827 2026] [security2:error] [pid 10396:tid 10396] [client 195.63.30.73:15302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.kellenbarger.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kellenbarger.com"] [uri "/wp-login.php"] [unique_id "aa_BI3JVTI1gKHV7PXkUswAAAAQ"], referer: http://kellenbarger.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-03 11:33:19 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 195.63.30.73 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 195.63.30.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 06:33:15.199922 2026] [security2:error] [pid 18106:tid 18106] [client 195.63.30.73:54370] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|daos.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "daos.org"] [uri "/wp-login.php"] [unique_id "aabG-2XiYUupj58a8ew9JwAAAAM"], referer: https://daos.org/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇻🇳 123.21.71.60

🇺🇸 195.184.76.127

🇬🇧 193.176.29.16

🇺🇸 154.16.116.152

🇵🇭 143.44.197.254

🇨🇳 115.231.78.11

🇳🇱 104.234.138.25

🇺🇸 66.240.223.214

🇹🇼 60.251.40.153

🇳🇱 45.148.10.141

🇬🇧 45.133.173.141

🇸🇬 45.78.216.159

🇨🇦 20.104.50.220

🇺🇸 139.87.112.117

🇳🇱 91.92.40.151

🇺🇸 71.6.135.131

🇺🇸 47.18.187.240

🇷🇺 46.191.190.254

🇵🇪 38.250.158.156