JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.167.25.222

104.167.25.222 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.167.25.222

Whois 104.167.25.222

IP Abuse Reports for 104.167.25.222:

This IP address has been reported a total of 41 times from 18 distinct sources. 104.167.25.222 was first reported on October 21st 2024, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-09 06:30:59 (23 hours ago)	6.198 requests with url.path .git/	Brute-Force Bad Web Bot
🇲🇽 octageeks.com	2026-07-07 04:21:10 (3 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-07-05 17:03:07 (4 days ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 ELYAZ	2026-07-03 12:46:05 (6 days ago)	(y4) Failed scan -byebye- from 104.167.25.222 (US/United States/-): (CF_ENABLE)	Hacking
🇱🇻 garmtech.com	2026-07-01 19:16:14 (1 week ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇪🇸 10dencehispahard SL	2025-12-29 09:16:37 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-11 02:14:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 21:14:41.210608 2025] [security2:error] [pid 7599:tid 7599] [client 104.167.25.222:24063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mehlerproperties.com"] [uri "/.env"] [unique_id "aTopEUBkF1B5N_h90KYD8gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 03:07:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:07:10.581387 2025] [security2:error] [pid 31173:tid 31173] [client 104.167.25.222:32349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosozuki.com"] [uri "/.svn/wc.db"] [unique_id "aTZA3iRN935hKlTX5E5G1gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 13:56:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:56:28.144845 2025] [security2:error] [pid 25372:tid 25372] [client 104.167.25.222:22547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lexie.org"] [uri "/.git/HEAD"] [unique_id "aTWHjPop1BwKqlBV8L2S8QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 13:38:33 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:38:27.675535 2025] [security2:error] [pid 9833:tid 9833] [client 104.167.25.222:13031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infiniteliving.org"] [uri "/.git/HEAD"] [unique_id "aTWDU9TKGRC9g4vQ_-ax9wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 16:33:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 11:33:43.923458 2025] [security2:error] [pid 26151:tid 26151] [client 104.167.25.222:12535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "musicwithsteve.com"] [uri "/.env"] [unique_id "aTMJZ5V0ahqjwNafNR81NgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 16:18:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 11:18:08.529081 2025] [security2:error] [pid 4353:tid 4374] [client 104.167.25.222:32163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giorgiogranozio.com"] [uri "/.svn/wc.db"] [unique_id "aTMFwJXroBTGTA2_DJEiTQAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 13:39:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 08:39:48.974880 2025] [security2:error] [pid 28348:tid 28348] [client 104.167.25.222:17601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rame-int.com"] [uri "/.git/HEAD"] [unique_id "aTLgpH6DeaOWmJhtb-bnqQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 10:33:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:33:43.804680 2025] [security2:error] [pid 6626:tid 6626] [client 104.167.25.222:27677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jwilder.com"] [uri "/.svn/wc.db"] [unique_id "aTK1B83NfjYJv_hmaCGJlAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::2a0

🇵🇭 222.127.16.110

🇰🇷 211.63.214.90

🇭🇰 199.45.154.137

🇺🇸 167.71.18.93

🇺🇸 152.32.206.74

🇺🇸 151.240.241.32

🇫🇷 91.231.89.231

🇮🇹 83.224.163.155

🇬🇧 35.203.211.216

🇨🇳 27.8.44.168

🇯🇵 8.221.140.241

🇺🇸 207.90.244.4

🇿🇼 197.221.254.55

🇩🇪 185.242.3.238

🇫🇷 163.172.182.64

🇺🇸 147.185.132.40

🇺🇸 147.185.132.26

🇺🇸 47.251.85.109

🇫🇷 45.90.163.37