JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.116

104.207.61.116 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.116

Whois 104.207.61.116

IP Abuse Reports for 104.207.61.116:

This IP address has been reported a total of 126 times from 11 distinct sources. 104.207.61.116 was first reported on June 4th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-03-27 11:08:24 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇫🇷 masterguru	2026-03-25 18:32:31 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.116 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.116 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-01-03 13:43:14 (5 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 04:48:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:48:39.391656 2025] [security2:error] [pid 11224:tid 11224] [client 104.207.61.116:54859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.paulzaremba.com"] [uri "/.svn/wc.db"] [unique_id "aSU1J3PcDRXlOJbfFAYxkQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:53:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:04.534114 2025] [security2:error] [pid 20960:tid 20960] [client 104.207.61.116:10021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pseudo.space"] [uri "/.env"] [unique_id "aSUaEOX5PpBvK5ourrICdAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:06:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:27.986945 2025] [security2:error] [pid 8881:tid 8881] [client 104.207.61.116:17337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.compupackinc.com"] [uri "/.env"] [unique_id "aSUPI2FZNRUxRpnfmhoAzgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:22:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:22:08.215989 2025] [security2:error] [pid 22698:tid 22698] [client 104.207.61.116:56437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.abramson-offner.com"] [uri "/.git/HEAD"] [unique_id "aSUEwIt7IuFffI0hRKZLowAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:02:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:02:20.270474 2025] [security2:error] [pid 30069:tid 30069] [client 104.207.61.116:35655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bobfaw.com"] [uri "/.git/HEAD"] [unique_id "aSTyDCENOO4GdOzSCZ-Q8QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-13 07:17:47 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 cmbplf	2025-10-12 06:26:12 (8 months ago)	325 requests with url.path *config.php	Brute-Force Bad Web Bot
Anonymous	2025-10-10 16:55:05 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 15:50:16 (8 months ago)	Attempted brute force login to web vpn 37 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 37 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 22:46:19 (8 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 22:13:41 (8 months ago)	Attempted brute force login to web vpn 19 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 19 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 00:20:00 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 196.245.54.157

🇩🇪 167.172.108.197

🇩🇪 167.94.146.43

🇨🇳 112.92.129.95

🇨🇳 111.18.139.126

🇳🇱 91.92.40.10

🇳🇱 45.156.128.76

🇳🇱 45.156.128.73

🇹🇼 198.235.24.98

🇨🇳 120.231.37.60

🇻🇳 113.169.148.231

🇧🇬 91.191.209.46

🇳🇱 91.92.42.10

🇳🇱 91.92.40.8

🇳🇱 45.156.128.69

🇳🇱 45.156.128.68

🇳🇱 45.156.128.67

🇳🇱 45.87.41.212

🇺🇸 40.93.23.96

🇺🇸 17.241.75.229