JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.45.61

104.207.45.61 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.45.61

Whois 104.207.45.61

IP Abuse Reports for 104.207.45.61:

This IP address has been reported a total of 134 times from 15 distinct sources. 104.207.45.61 was first reported on June 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-04-29 15:22:36 (1 month ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-03-19 09:37:10 (2 months ago)	Forum/form spam	Web Spam
🇺🇸 windowsforum	2026-02-08 23:20:08 (4 months ago)	Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, username=CarloMickl	Web Spam Bad Web Bot
Anonymous	2026-02-04 13:53:13 (4 months ago)	Forum/form spam	Web Spam
Anonymous	2026-01-09 05:34:02 (5 months ago)	Forum/form spam	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:52 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-27 21:45:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:45:56.087437 2025] [security2:error] [pid 11015:tid 11015] [client 104.207.45.61:38851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundaciondamashcc.org.ec"] [uri "/.env"] [unique_id "aSjGlOfBouA5EdSsv0nnJgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:34:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:34:49.150127 2025] [security2:error] [pid 16088:tid 16088] [client 104.207.45.61:26087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bews.com"] [uri "/.svn/wc.db"] [unique_id "aSUx6Q-9yo8zuW4-ngpEDwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:35:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.45.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.45.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:35:30.245302 2025] [security2:error] [pid 19217:tid 19217] [client 104.207.45.61:29739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.katemcleod.net"] [uri "/.env"] [unique_id "aST50mbmpaJmZdqOlYNNtgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 09:45:01 (6 months ago)	suspicious request in access.log	Web App Attack
🇳🇱 i-turnradio.nl	2025-11-24 06:17:38 (6 months ago)	2025-11-24 @ 07:17:37 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
Anonymous	2025-11-13 23:38:20 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-17 15:31:20 (7 months ago)	GlobalProtect login attempts with user concordsmtp.	VPN IP Brute-Force
🇩🇪 bsoft.de	2025-10-16 06:14:57 (7 months ago)	104.207.45.61 - - [16/Oct/2025:08:14:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 ... show more 104.207.45.61 - - [16/Oct/2025:08:14:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 104.207.45.61 - - [16/Oct/2025:08:14:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/525.28.3 (KHTML, like Gecko) Version/3.2.3 Safari/525.28.3" 104.207.45.61 - - [16/Oct/2025:08:14:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-J700M Build/MMB29K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/69.0.3497.100 Mobile Safari/537.36" show less	Web App Attack
Anonymous	2025-10-11 05:14:09 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.243.160.109

🇨🇦 104.255.152.18

🇮🇪 63.32.54.111

🇩🇪 47.245.139.47

🇸🇬 34.21.216.81

🇮🇳 1.7.100.203

🇲🇽 189.167.50.45

🇺🇾 179.26.109.162

🇮🇷 176.65.240.242

🇸🇪 155.4.245.222

🇭🇰 124.156.129.246

🇺🇸 52.176.211.73

🇨🇦 20.63.64.235

🇭🇰 2404:6800:4005:c01::121

🇫🇮 178.20.210.208

🇰🇷 175.209.156.146

🇫🇷 163.172.144.16

🇨🇳 139.9.191.197

🇻🇳 103.61.44.43

🇩🇪 91.92.240.42