JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.103

104.207.61.103 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 8%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.103

Whois 104.207.61.103

IP Abuse Reports for 104.207.61.103:

This IP address has been reported a total of 131 times from 18 distinct sources. 104.207.61.103 was first reported on June 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-23 06:52:49 (1 month ago)	wordpress authentication brute force	Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-05-19 08:35:12 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇱🇻 garmtech.com	2026-03-31 12:14:23 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-23 09:55:22 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-14 23:52:25 (3 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 05:33:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 00:33:53.244764 2026] [security2:error] [pid 29553:tid 29553] [client 104.207.61.103:53741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anewnurse.homehealth101.com"] [uri "/.git/config"] [unique_id "aZ04QUf6L_Qa-c75ev5gMAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 14:44:29 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 09:44:24.319097 2026] [security2:error] [pid 6076:tid 6095] [client 104.207.61.103:46617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yucef.wizart.org"] [uri "/.git/config"] [unique_id "aZxnyH7qazxQSQrhE9KOjAAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 09:45:49 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 04:45:44.703363 2026] [security2:error] [pid 17036:tid 17036] [client 104.207.61.103:56551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pipperonline.gulftelecom.com"] [uri "/.git/config"] [unique_id "aZwhyFPAmeIaK9BMWDrSXQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-23 15:02:19 (4 months ago)	2026-01-23T17:02:18.795783+02:00 zanati wp(www.sahpa.co.za)[191953]: Blocked authentication attempt ... show more 2026-01-23T17:02:18.795783+02:00 zanati wp(www.sahpa.co.za)[191953]: Blocked authentication attempt for [email protected] from 104.207.61.103 ... show less	Web App Attack
🇺🇸 myagent.site	2026-01-15 08:40:52 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:04 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 masterguru	2025-11-11 23:41:17 (7 months ago)	(Botnet_distributed) Probably botnet. Call spam script from 104.207.61.103 (CA/Canada/-): 1 in the l ... show more (Botnet_distributed) Probably botnet. Call spam script from 104.207.61.103 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇬🇧 oncord	2025-11-09 21:45:46 (7 months ago)	Form spam	Web Spam
Anonymous	2025-04-07 10:47:13 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 13:06:07 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.238

🇬🇧 185.247.137.195

🇺🇸 162.216.150.198

🇰🇷 218.144.90.41

🇨🇴 186.31.162.201

🇳🇱 178.85.183.98

🇷🇺 176.112.128.143

🇳🇱 176.65.139.46

🇨🇳 116.179.32.202

🇬🇧 84.68.145.64

🇺🇸 47.251.107.237

🇹🇷 46.252.96.136

🇺🇸 3.83.245.221

🇳🇱 204.76.203.206

🇺🇸 195.184.76.30

🇵🇱 194.180.49.219

🇲🇽 189.154.104.241

🇮🇳 182.69.177.154

🇬🇧 81.19.219.216

🇱🇹 45.227.254.170