JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.54.25

104.207.54.25 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.54.25

Whois 104.207.54.25

IP Abuse Reports for 104.207.54.25:

This IP address has been reported a total of 64 times from 12 distinct sources. 104.207.54.25 was first reported on June 5th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-12-30 03:15:14 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2025-12-11 09:16:46 (6 months ago)	9 packets to port 2083	Port Scan
🇺🇸 TPI-Abuse	2025-11-26 08:38:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:38:34.549414 2025] [security2:error] [pid 19221:tid 19221] [client 104.207.54.25:56019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.vangentholding.com"] [uri "/.git/HEAD"] [unique_id "aSa8isE_GmFW713pegELmwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:49:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:49:31.294832 2025] [security2:error] [pid 12653:tid 12653] [client 104.207.54.25:30525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dshgraphics.com"] [uri "/.git/HEAD"] [unique_id "aSaU6yvoI27BrbSrK3HeuAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:33:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:33:07.309189 2025] [security2:error] [pid 24879:tid 24879] [client 104.207.54.25:60363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.expertprofessionalcleaners.com"] [uri "/.svn/wc.db"] [unique_id "aSaREw3M3CsoN1uym6sZLwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:59:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:59:51.875626 2025] [security2:error] [pid 26997:tid 26997] [client 104.207.54.25:27591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lejzerowicz.org"] [uri "/.git/HEAD"] [unique_id "aSZRBzYv5h8H0-gWcZzlYwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:25:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.54.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:25:13.626597 2025] [security2:error] [pid 10829:tid 10829] [client 104.207.54.25:41019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.milocor.com"] [uri "/.svn/wc.db"] [unique_id "aSP6Sa0strjewTNwORE39wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-12 12:26:36 (6 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.11.12 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-10-07 17:13:55 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-04-06 22:45:37 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:26:00 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 16:35:56 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 15:26:48 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 19:34:11 (1 year ago)	Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 8 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-31 19:25:41 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.03.31 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.03.31 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.145.114

🇩🇪 213.209.159.11

🇲🇽 200.92.210.26

🇺🇸 136.117.250.100

🇱🇹 62.60.130.238

🇺🇸 50.35.168.148

🇨🇳 220.167.233.145

🇸🇻 138.219.13.21

🇨🇭 77.243.184.208

🇳🇱 45.148.10.121

🇧🇷 205.210.31.236

🇱🇹 141.98.11.83

🇳🇱 45.148.10.151

🇦🇺 34.129.5.16

🇹🇼 198.235.24.115

🇦🇲 178.160.203.108

🇨🇳 101.126.141.163

🇵🇭 27.110.166.67

🇮🇳 182.95.230.122

🇨🇴 181.49.207.198