JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.59.25

104.207.59.25 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.59.25

Whois 104.207.59.25

IP Abuse Reports for 104.207.59.25:

This IP address has been reported a total of 80 times from 7 distinct sources. 104.207.59.25 was first reported on June 4th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-16 16:01:30 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 11:01:25.602933 2026] [security2:error] [pid 4510:tid 4510] [client 104.207.59.25:23035] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.marveldirectory.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.marveldirectory.com"] [uri "/mailto:[email protected]"] [unique_id "aWpg1ZKx_4B8Vb7_HT8yswAAABA"], referer: http://www.marveldirectory.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 14:54:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 09:54:03.969288 2025] [security2:error] [pid 29551:tid 29551] [client 104.207.59.25:34939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jtebookkeeping.co.uk"] [uri "/.svn/wc.db"] [unique_id "aTGgixWX911zTtcwIvVAhwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:49:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:49:08.872728 2025] [security2:error] [pid 2685:tid 2685] [client 104.207.59.25:58919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.beyondleanbook.com"] [uri "/.git/HEAD"] [unique_id "aSUnNI-liHOaLmdWjunT_AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:12:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:12:15.472899 2025] [security2:error] [pid 9855:tid 9855] [client 104.207.59.25:49075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jacquelineperriam.com"] [uri "/.env"] [unique_id "aSUej499OZSjcZXrBroSDQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:38:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:38:52.668376 2025] [security2:error] [pid 21056:tid 21056] [client 104.207.59.25:59073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.paguilar.com"] [uri "/.env"] [unique_id "aSUWvJ9EDVeTSnKWVPGd7AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:23:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:23:17.604799 2025] [security2:error] [pid 1647141:tid 1647212] [client 104.207.59.25:29469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luckystarscattery.acornway.com"] [uri "/.git/HEAD"] [unique_id "aSUTFdffCdpZ5cNrCNdr2gAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:01:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.59.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:00:57.498595 2025] [security2:error] [pid 5660:tid 5660] [client 104.207.59.25:38849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.femalegamblers.org"] [uri "/.svn/wc.db"] [unique_id "aSTxuS8dSFIl7qAKno8jSgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-19 10:13:02 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 18:04:22 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 22:22:21 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 21:42:22 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 19:56:58 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 08:14:24 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-01 19:16:32 (1 year ago)	Attempted brute force login to web vpn 11 time(s); last attempt for 2025.04.01 is noted in report ti ... show more Attempted brute force login to web vpn 11 time(s); last attempt for 2025.04.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-31 21:20:37 (1 year ago)	Attempted brute force login to web vpn 10 time(s); last attempt for 2025.03.31 is noted in report ti ... show more Attempted brute force login to web vpn 10 time(s); last attempt for 2025.03.31 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.234.11.10

🇧🇪 198.235.24.208

🇺🇸 167.71.251.37

🇺🇸 147.185.132.88

🇺🇸 147.185.132.45

🇨🇳 120.198.138.185

🇳🇱 45.148.10.147

🇨🇳 27.155.120.135

🇺🇿 185.203.236.212

🇦🇪 20.203.42.204

🇨🇳 182.119.60.186

🇫🇷 173.212.228.191

🇫🇮 147.185.133.71

🇫🇷 147.93.93.67

🇩🇪 139.162.186.218

🇨🇳 124.164.251.88

🇿🇦 102.129.60.32

🇫🇮 80.223.194.237

🇸🇬 43.98.181.210

🇵🇰 160.187.180.175