JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.58.25

104.207.58.25 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.58.25

Whois 104.207.58.25

IP Abuse Reports for 104.207.58.25:

This IP address has been reported a total of 73 times from 11 distinct sources. 104.207.58.25 was first reported on June 5th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-01-02 21:08:30 (5 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-12-28 18:20:23 (5 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-25 04:51:19 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:51:15.502604 2025] [security2:error] [pid 10747:tid 10756] [client 104.207.58.25:21665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bobchaos.com"] [uri "/.svn/wc.db"] [unique_id "aSU1w12GfO2s-Qdwr6d6PwAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:21:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:21:17.436079 2025] [security2:error] [pid 9551:tid 9551] [client 104.207.58.25:19321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stlrosesociety.org"] [uri "/.env"] [unique_id "aSUuvVuS0aMsmnM2BQ1mfwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:49:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:49:39.152957 2025] [security2:error] [pid 10445:tid 10445] [client 104.207.58.25:34209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cyberviews.club"] [uri "/.env"] [unique_id "aSUnU0jPontZ_wmA6NCgiAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:30:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:30:13.425803 2025] [security2:error] [pid 5698:tid 5698] [client 104.207.58.25:51533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nancyscafeandcatering.com"] [uri "/.env"] [unique_id "aSUixZM35-zKpYkYYsWdqwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:06:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:17.233828 2025] [security2:error] [pid 653756:tid 653756] [client 104.207.58.25:47195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.correlationdesign.com"] [uri "/.env"] [unique_id "aSUPGVhJquaRNgyt1HK3IAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:33:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:32:45.191393 2025] [security2:error] [pid 1647140:tid 1647192] [client 104.207.58.25:33919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tapdd.com"] [uri "/.git/HEAD"] [unique_id "aSUHPcWdNO_bFaD03ZYMFgAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:55:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.58.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:54:57.647245 2025] [security2:error] [pid 16922:tid 16922] [client 104.207.58.25:32865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.notimallinckrodt.com.ar"] [uri "/.env"] [unique_id "aST-YZ7ZkHr5FIdtmhmqWQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 adnscom.net	2025-10-24 06:42:26 (7 months ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
Anonymous	2025-10-19 16:58:57 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 19:43:56 (7 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-10-06 08:29:29 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-04-07 01:51:07 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 20:25:59 (1 year ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.191.66.84

🇮🇳 220.158.159.34

🇺🇸 172.234.217.192

🇺🇸 172.71.150.180

🇺🇸 172.68.23.14

🇺🇸 162.216.150.146

🇵🇰 160.30.108.205

🇺🇸 108.162.246.216

🇳🇱 107.189.27.179

🇺🇸 103.61.13.194

🇿🇲 102.23.122.235

🇷🇴 80.94.92.168

🇺🇸 66.132.186.174

🇸🇬 47.84.139.122

🇧🇪 198.235.24.254

🇬🇧 188.240.59.3

🇺🇸 172.71.150.181

🇺🇸 172.69.135.165

🇺🇸 162.158.41.45

🇺🇸 157.245.14.106