JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.167.25.45

104.167.25.45 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.167.25.45

Whois 104.167.25.45

IP Abuse Reports for 104.167.25.45:

This IP address has been reported a total of 22 times from 11 distinct sources. 104.167.25.45 was first reported on November 4th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-02-11 09:01:00 (3 months ago)	SMS pumping	DDoS Attack VPN IP Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:11 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-28 21:27:01 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:39:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:39:47.288065 2025] [security2:error] [pid 24181:tid 24181] [client 104.167.25.45:41589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beetreelabs.com"] [uri "/.svn/wc.db"] [unique_id "aSQZ03nmf0muUTUXvhtimgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:25:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.167.25.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.167.25.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:25:21.290805 2025] [security2:error] [pid 8820:tid 8820] [client 104.167.25.45:23619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rietzke.net"] [uri "/.env"] [unique_id "aSPsQRsgoVYeqMcEfh7rRQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 07:26:30 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 00:48:33 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-13 14:52:37 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.13 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-09 04:59:07 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.09 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.09 is noted in report timestamp show less	Hacking Brute-Force
🇭🇺 zolav8	2025-11-08 04:47:05 (6 months ago)	SQL injection / web attack attempt	Hacking SQL Injection
Anonymous	2025-10-18 03:51:54 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-17 12:21:09 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-16 08:36:49 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-15 22:53:33 (7 months ago)	GlobalProtect login attempts with user petematt.	VPN IP Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 103.48.84.200

🇯🇵 101.36.104.242

🇸🇪 90.231.80.167

🇫🇷 2001:41d0:33d:9200::40f

🇨🇳 210.16.189.78

🇧🇷 205.210.31.238

🇬🇧 188.240.59.21

🇬🇧 165.154.129.220

🇺🇸 104.168.79.23

🇭🇰 101.32.206.98

🇩🇪 64.89.163.173

🇺🇸 64.62.197.129

🇸🇬 47.245.85.172

🇳🇱 45.148.10.183

🇬🇧 45.82.76.107

🇺🇸 44.213.105.41

🇷🇴 2.57.121.112

🇩🇪 213.209.159.56

🇺🇸 162.216.150.3

🇩🇪 156.236.31.85