JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.106

104.207.61.106 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.106

Whois 104.207.61.106

IP Abuse Reports for 104.207.61.106:

This IP address has been reported a total of 134 times from 17 distinct sources. 104.207.61.106 was first reported on June 19th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 adamblack	2026-01-08 12:58:42 (5 months ago)	Information gathering attempt: Accessing sensitive /.env file at chtkmtk.com	Bad Web Bot
Anonymous	2026-01-03 13:42:38 (5 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 jcbriar	2025-12-30 06:55:07 (5 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇫🇷 Security_Whaller	2025-12-30 06:15:59 (5 months ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:57 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 06:26:48 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:26:45.172140 2025] [security2:error] [pid 6590:tid 6590] [client 104.207.61.106:28845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misogynyis.com"] [uri "/.svn/wc.db"] [unique_id "aVIfJVZItNdsuR2DxwG6EgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2025-12-29 06:05:33 (5 months ago)	Login credentials theft attempt	Hacking
🇺🇸 TPI-Abuse	2025-12-29 05:27:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:27:47.472122 2025] [security2:error] [pid 2644682:tid 2644686] [client 104.207.61.106:18819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamcohomecare.com"] [uri "/.env"] [unique_id "aVIRU4bE9pXjh74wbNZ7uwAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2025-12-04 11:28:24 (6 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-25 00:04:37 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:39:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:39:34.456914 2025] [security2:error] [pid 16130:tid 16130] [client 104.207.61.106:38707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bees.properties"] [uri "/.git/HEAD"] [unique_id "aSQZxg_rCP4ck9l29gVeEgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:31:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:31:03.674534 2025] [security2:error] [pid 3039:tid 3039] [client 104.207.61.106:51563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.masterfulenlighteningfreestudies.org"] [uri "/.env"] [unique_id "aSP7p-LxopjqqfbOAM_F2QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2025-10-19 05:22:51 (7 months ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2025-04-06 23:35:01 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 20:24:08 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 157.66.27.31

🇺🇸 107.174.33.105

🇨🇳 106.35.85.62

🇮🇳 103.75.34.58

🇧🇬 91.92.40.34

🇦🇴 41.63.176.50

🇭🇰 199.45.154.176

🇲🇽 189.156.229.12

🇲🇽 187.191.48.24

🇺🇸 152.32.235.69

🇭🇰 152.32.215.226

🇳🇱 141.11.62.23

🇷🇴 80.94.92.171

🇺🇸 74.47.41.198

🇺🇸 64.62.156.177

🇨🇳 39.101.77.118

🇺🇸 199.27.159.12

🇹🇿 197.186.9.218

🇩🇪 194.88.98.112

🇨🇳 123.169.123.4