JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.153

104.207.61.153 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.153

Whois 104.207.61.153

IP Abuse Reports for 104.207.61.153:

This IP address has been reported a total of 131 times from 12 distinct sources. 104.207.61.153 was first reported on June 7th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-20 07:00:24 (3 months ago)	\| [Dangerous/China] Aggressive IP 104.207.61.153 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/China] Aggressive IP 104.207.61.153 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-01-05 20:33:17 (5 months ago)	Attempted brute force login to web vpn 19 time(s); last attempt for 2026.01.05 is noted in report ti ... show more Attempted brute force login to web vpn 19 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-29 01:37:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 20:36:51.217482 2025] [security2:error] [pid 12205:tid 12205] [client 104.207.61.153:39225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abstractorangemusic.com"] [uri "/wp-config.php"] [unique_id "aSpOMwNpbHaFdmTxp1NgLgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 20:07:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:07:13.316892 2025] [security2:error] [pid 347:tid 347] [client 104.207.61.153:10867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aarce.me"] [uri "/.env.local"] [unique_id "aSoA8Qe54G9pyEO_0X_5ZgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 18:59:05 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:58:57.045450 2025] [security2:error] [pid 24102:tid 24102] [client 104.207.61.153:10137] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aacoustics.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aacoustics.com"] [uri "/database.sql"] [unique_id "aSnw8ckKVEu0T2NeS3yUBAAAADw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:06:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:42.770180 2025] [security2:error] [pid 3599211:tid 3599228] [client 104.207.61.153:58807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lightsondisplay.com"] [uri "/.svn/wc.db"] [unique_id "aSanAiWBb6LubLi-gSEs9QAAAE8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:49:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:49:27.517064 2025] [security2:error] [pid 12405:tid 12405] [client 104.207.61.153:60819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.asurprisinglittletown.com"] [uri "/.env"] [unique_id "aSaU5wEuC-5Sf0R_V2e80QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:02:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:02:16.378039 2025] [security2:error] [pid 17234:tid 17234] [client 104.207.61.153:35015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.littlepeopledelivery.com"] [uri "/.svn/wc.db"] [unique_id "aSPKuIUik31nsPkPvbE0hQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 17:32:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 12:32:40.721749 2025] [security2:error] [pid 27543:tid 27543] [client 104.207.61.153:19805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barigby.com"] [uri "/.git/HEAD"] [unique_id "aSNFOHh9X9Ngji70QB50SAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-12 13:45:57 (7 months ago)	Attempted brute force login to web vpn 109 time(s); last attempt for 2025.11.12 is noted in report t ... show more Attempted brute force login to web vpn 109 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-11 05:46:08 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.11 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 16:48:43 (8 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.10 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 21:25:10 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-08 18:03:43 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 23:49:41 (8 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a02:810d:978c:2d00:28cb:7c79:1daf:6ebc

🇳🇱 178.231.211.158

🇺🇸 136.113.241.226

🇸🇬 68.178.160.25

🇱🇹 62.60.130.129

🇬🇧 35.203.210.209

🇧🇷 205.210.31.227

🇷🇺 178.177.40.170

🇺🇸 138.186.136.179

🇺🇸 136.113.199.53

🇺🇸 35.199.176.25

🇳🇱 34.178.151.19

🇺🇸 34.138.190.132

🇺🇸 34.106.65.81

🇺🇸 34.73.228.181

🇺🇸 8.228.91.209

🇪🇸 196.196.150.4

🇳🇱 185.93.89.79

🇨🇳 123.162.56.5

🇨🇳 114.220.238.30