JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.166

104.207.61.166 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.166

Whois 104.207.61.166

IP Abuse Reports for 104.207.61.166:

This IP address has been reported a total of 144 times from 21 distinct sources. 104.207.61.166 was first reported on June 7th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-05 10:06:00 (7 hours ago)	wp-scan	Bad Web Bot
🇫🇷 masterguru	2026-05-12 11:55:08 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-10 13:38:56 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-09 06:41:42 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:45:53 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 agenciahypelab.com.br	2026-04-25 12:14:17 (1 month ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇫🇷 masterguru	2026-04-23 11:12:26 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇨🇭 4server	2026-04-21 05:15:34 (1 month ago)	[TueApr2107:15:29.7872452026][security2:error][pid475967:tid475976][client104.207.61.166:0]ModSecuri ... show more [TueApr2107:15:29.7872452026][security2:error][pid475967:tid475976][client104.207.61.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prodotti.comarcosa.com\"][uri\"/xmlrpc.php\"][unique_id\"aecH8U1GDDN1UZwQANn0_QAAAIA\"] show less	Hacking Web App Attack
🇩🇪 Lino Project	2026-04-21 04:40:38 (1 month ago)	104.207.61.166 - - [21/Apr/2026:06:40:38 +0200] "POST /xmlrpc.php HTTP/2.0" 403 455 "-" "Mozilla/5.0 ... show more 104.207.61.166 - - [21/Apr/2026:06:40:38 +0200] "POST /xmlrpc.php HTTP/2.0" 403 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-18 23:45:25 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-18 14:45:07 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-13 10:12:48 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.166 (CA/Canada/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 nowyouknow	2025-12-12 07:39:56 (5 months ago)	(From [email protected]) Forget complex side hustles. The Writing Wizard system gives you ... show more (From [email protected]) Forget complex side hustles. The Writing Wizard system gives you the simple templates to earn consistent income from home just by writing short, 3-sentence letters. No experience needed, no selling—just easy money at your own pace. Click to Learn the Secret & Start Earning! https://themoneyfromhome.com show less	Phishing Web Spam
🇩🇪 dklueh79	2025-12-11 07:20:58 (5 months ago)	Probe for vulnerabilities. Path attempted: /.svn/wc.db	Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 14:57:27 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 09:57:21.016349 2025] [security2:error] [pid 9969:tid 9969] [client 104.207.61.166:36813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kruizekontrhl.com"] [uri "/.env"] [unique_id "aTbnUavjX8khAhjZnWdE2QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.149.53.243

🇺🇸 195.184.76.148

🇳🇬 105.120.129.109

🇲🇽 186.96.145.241

🇺🇸 162.216.149.54

🇺🇸 135.222.40.33

🇨🇳 123.245.84.72

🇪🇸 46.6.124.216

🇬🇧 35.203.210.236

🇺🇸 34.138.54.143

🇧🇪 2a00:1450:400c:c08::127

🇺🇸 136.111.106.203

🇯🇵 133.167.106.165

🇻🇳 113.180.58.242

🇨🇳 111.26.106.119

🇺🇸 108.179.129.92

🇭🇰 101.36.109.130

🇺🇸 64.94.159.247

🇸🇬 34.126.64.49

🇦🇷 186.148.224.83