JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.53.25

104.207.53.25 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.53.25

Whois 104.207.53.25

IP Abuse Reports for 104.207.53.25:

This IP address has been reported a total of 69 times from 12 distinct sources. 104.207.53.25 was first reported on June 29th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-01-05 20:10:14 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-21 21:04:44 (5 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:53:06 (5 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 10dencehispahard SL	2025-12-03 07:40:47 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-03 05:40:45 (6 months ago)	(mod_security) mod_security (id:210740) triggered by 104.207.53.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210740) triggered by 104.207.53.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 00:40:39.540895 2025] [security2:error] [pid 12222:tid 12222] [client 104.207.53.25:34019] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.powerkiteforum.com\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerkiteforum.com"] [uri "/guestbook.php"] [unique_id "aS_NV9YtKCeOR0KSNByR5QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 22:53:47 (6 months ago)	(mod_security) mod_security (id:210740) triggered by 104.207.53.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210740) triggered by 104.207.53.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:53:39.853754 2025] [security2:error] [pid 711864:tid 711864] [client 104.207.53.25:56961] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.neff.family.name\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.neff.family.name"] [uri "/unwiki/"] [unique_id "aSjWc8XjiuzLwHcleQT-5wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:42:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.53.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.53.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:42:54.007766 2025] [security2:error] [pid 32504:tid 32504] [client 104.207.53.25:14047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wandcompany.com"] [uri "/.git/HEAD"] [unique_id "aSPiTtkkPgZgkRztx_UJHgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 23:12:37 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-04-07 13:17:14 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 21:25:06 (1 year ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 16:15:57 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 23:14:52 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 12:18:07 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-01 17:24:05 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.01 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.01 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fb54:9a3::

🇳🇱 89.21.67.130

🇺🇸 66.132.172.213

🇭🇰 156.245.239.180

🇭🇰 114.111.52.109

🇳🇱 89.21.67.161

🇫🇷 62.210.209.225

🇸🇬 47.128.42.183

🇩🇪 46.225.215.191

🇮🇩 43.243.142.42

🇭🇰 23.249.28.115

🇨🇦 4.206.92.183

🇺🇸 3.214.237.244

🇳🇱 193.176.31.243

🇳🇱 185.223.235.3

🇵🇱 95.214.54.37

🇬🇧 87.236.176.44

🇳🇱 81.19.216.106

🇨🇳 113.31.124.21

🇺🇸 96.78.175.36