JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.160

104.207.61.160 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.160

Whois 104.207.61.160

IP Abuse Reports for 104.207.61.160:

This IP address has been reported a total of 151 times from 18 distinct sources. 104.207.61.160 was first reported on June 13th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754	DDoS Attack
Anonymous	2025-12-21 12:17:10 (5 months ago)	Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:06:23 (5 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-08 22:26:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 17:26:56.609683 2025] [security2:error] [pid 2935:tid 2935] [client 104.207.61.160:29131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aufflammen.com"] [uri "/.git/HEAD"] [unique_id "aTdQsDGDnn1JlBSMvWArywAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 20:38:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 15:38:34.497397 2025] [security2:error] [pid 20363:tid 20363] [client 104.207.61.160:58441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tradenaples.com"] [uri "/.env"] [unique_id "aTXlyhC8JyT1uJElyOAm_gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 13:14:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:14:12.761398 2025] [security2:error] [pid 22512:tid 22512] [client 104.207.61.160:13627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramabahama.net"] [uri "/.svn/wc.db"] [unique_id "aTQsJL3XAtTtmGB5rx0NbwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 11:13:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:13:38.850458 2025] [security2:error] [pid 5654:tid 5657] [client 104.207.61.160:11707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "executiveaccounting.net"] [uri "/.env"] [unique_id "aTQP4uX6ffQiRn5rQTaUQgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Thaliruth	2025-12-05 18:19:50 (6 months ago)	[05/Dec/2025:19:19:46.706846 +0100] aTMiQleFwyVGmBraC-8bhwAAAAs 104.207.61.160 53190 127.0.0.1 7080 ... show more [05/Dec/2025:19:19:46.706846 +0100] aTMiQleFwyVGmBraC-8bhwAAAAs 104.207.61.160 53190 127.0.0.1 7080 ... show less	Hacking
🇺🇸 TPI-Abuse	2025-12-05 05:09:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:09:50.118271 2025] [security2:error] [pid 4575:tid 4575] [client 104.207.61.160:41469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnberk.com"] [uri "/.svn/wc.db"] [unique_id "aTJpHtjcHNv5MqrYqQKvUAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-01 23:56:48 (6 months ago)	Attempted brute force login to web vpn 901 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 901 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:23:15 (6 months ago)	Attempted brute force login to web vpn 864 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 864 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:45:51 (6 months ago)	Attempted brute force login to web vpn 1189 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 1189 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇳🇱 jjnxpct	2025-11-26 04:56:07 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:49:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:49:54.362961 2025] [security2:error] [pid 13270:tid 13270] [client 104.207.61.160:39443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cageliners.net"] [uri "/.svn/wc.db"] [unique_id "aSVDggq4ZBXLuFUB1sSqAAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:56:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:55:56.476232 2025] [security2:error] [pid 2157:tid 2157] [client 104.207.61.160:47689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idledog.abbeygardensllandudno.com"] [uri "/.git/HEAD"] [unique_id "aSU23PN5IdAPRAh74awgYAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.8.195.153

🇭🇰 172.253.6.27

🇺🇸 150.107.38.111

🇨🇦 85.217.149.19

🇺🇸 216.25.89.76

🇩🇪 213.209.159.227

🇨🇳 182.44.85.185

🇨🇳 120.238.118.198

🇨🇳 101.34.249.202

🇺🇦 82.193.122.91

🇸🇾 37.48.189.170

🇬🇧 35.203.210.222

fe80::7a9a:18ff:fe2e:e8a4

🇺🇸 184.93.113.125

🇺🇸 147.185.132.218

🇧🇩 123.49.38.114

🇷🇺 95.167.214.5

🇬🇧 81.135.202.127

🇨🇳 39.128.230.80

🇺🇸 18.235.110.182