JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.63.25

104.207.63.25 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.63.25

Whois 104.207.63.25

IP Abuse Reports for 104.207.63.25:

This IP address has been reported a total of 76 times from 11 distinct sources. 104.207.63.25 was first reported on June 4th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Vaction	2026-05-29 16:39:37 (6 days ago)	104.207.63.25 - - [29/May/2026:18:39:37 +0200] "GET http://65.ip-51-91-111.eu/.aws/credentials HTTP/ ... show more 104.207.63.25 - - [29/May/2026:18:39:37 +0200] "GET http://65.ip-51-91-111.eu/.aws/credentials HTTP/1.1" 404 437 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-05 20:30:24 (4 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇫🇮 stinpriza	2026-01-03 12:42:04 (5 months ago)	Web App Attack	Web App Attack
Anonymous	2025-12-21 11:30:13 (5 months ago)	Attempted brute force login to web vpn 180 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 180 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 21:23:39 (5 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 02:53:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:53:37.241965 2025] [security2:error] [pid 3365544:tid 3365625] [client 104.207.63.25:43683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jd-web-designs.com"] [uri "/.git/HEAD"] [unique_id "aSZrsZ6gyU3zOv0h7a6DuQAAAgM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:10:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:09:56.225251 2025] [security2:error] [pid 18770:tid 18770] [client 104.207.63.25:59189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.haddadpharmacy.com"] [uri "/.env"] [unique_id "aSZTZFglgoImgwoGBCYavQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:28:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:27:53.285139 2025] [security2:error] [pid 5477:tid 5477] [client 104.207.63.25:49943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jasbemarketing.com"] [uri "/.env"] [unique_id "aSQXCZ4azrkxb9VCggZTnQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:46:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:46:54.869074 2025] [security2:error] [pid 3727:tid 3727] [client 104.207.63.25:46441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.drxcontent.com"] [uri "/.svn/wc.db"] [unique_id "aSPxTgDFxZgAj5-kaYE4SAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:00:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.63.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:00:13.968461 2025] [security2:error] [pid 570:tid 570] [client 104.207.63.25:41803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.26c.org"] [uri "/.env"] [unique_id "aSPmXbPNU4kNLJjADozDSgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2025-10-19 11:18:33 (7 months ago)	(sshd) Failed SSH login from 104.207.63.25 (FR/France/-)	Brute-Force SSH
Anonymous	2025-04-06 14:45:10 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:27:24 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 16:45:32 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 06:00:15 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 182.189.47.77

🇻🇳 171.243.149.218

🇨🇳 101.36.228.201

🇮🇳 2401:4900:1cba:1e02:455a:c2a3:c89:899d

🇺🇸 172.178.82.191

🇺🇸 147.185.132.145

🇨🇳 117.83.83.235

🇺🇸 72.10.32.138

🇨🇳 59.36.233.74

🇳🇱 195.178.110.30

🇫🇷 194.163.139.224

🇵🇰 153.117.13.66

🇻🇳 152.32.162.42

🇨🇦 85.217.149.43

🇳🇱 77.83.39.42

🇸🇬 47.82.8.176

🇳🇱 45.148.10.151

🇺🇸 34.133.210.150

🇺🇦 194.44.27.121

🇨🇳 175.170.144.18