JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.189

104.207.61.189 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 46%: ?

46%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.189

Whois 104.207.61.189

IP Abuse Reports for 104.207.61.189:

This IP address has been reported a total of 167 times from 26 distinct sources. 104.207.61.189 was first reported on June 22nd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-06-20 13:46:06 (1 day ago)	Wordfence waf block on registrymatters	Web App Attack
🇩🇪 FeG Deutschland	2026-06-20 05:07:52 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 F242	2026-06-14 19:10:01 (1 week ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇨🇴 ingentar	2026-06-13 04:22:22 (1 week ago)	2026-06-12T23:21:32.695227-05:00 web wordpress(ingentar.com)[694916]: Blocked authentication attempt ... show more 2026-06-12T23:21:32.695227-05:00 web wordpress(ingentar.com)[694916]: Blocked authentication attempt for admin from 104.207.61.189 ... show less	Web App Attack Brute-Force
🇬🇧 spamverify.com	2026-06-12 04:11:13 (1 week ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-12 01:00:47 (1 week ago)	(mod_security) mod_security (id:900001) triggered by 104.207.61.189: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 104.207.61.189: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 04:00:46.843560 2026] [security2:error] [pid 53054:tid 53095] [client 104.207.61.189:22967] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: tavernadimitris.com"] [severity "CRITICAL"] [tag "security"] [hostname "tavernadimitris.com"] [uri "/wp-login.php"] [unique_id "aitaPun8ZOKItT2VFMooRAAAAU4"], referer: https://tavernadimitris.com/wp-login.php show less	Port Scan
Anonymous	2026-06-11 01:20:10 (1 week ago)	Web attack blocked by Wordfence on helenehoenjet.nl (1 hit). Reported by CRMON.	Web App Attack
🇨🇴 ingentar	2026-06-10 03:27:08 (1 week ago)	2026-06-09T22:25:52.657800-05:00 web wordpress(mcingepro.com)[552607]: Blocked authentication attemp ... show more 2026-06-09T22:25:52.657800-05:00 web wordpress(mcingepro.com)[552607]: Blocked authentication attempt for root from 104.207.61.189 ... show less	Web App Attack Brute-Force
🇬🇧 PeravixGroup	2026-06-09 19:31:45 (1 week ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 masterguru	2026-05-12 11:54:31 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-01 10:03:46 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-28 14:27:34 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:45:29 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-23 11:52:59 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-19 12:38:36 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.189 (CA/Canada/-): 1 in the last 3600 secs (0-193) show less	Hacking

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.75.185.227

🇦🇹 213.225.9.147

🇳🇱 193.25.217.247

🇦🇷 181.209.76.203

🇭🇰 118.193.32.119

🇺🇸 75.70.8.127

🇩🇪 69.5.169.201

🇸🇬 68.183.179.91

🇱🇹 45.227.254.170

🇺🇸 135.237.126.76

🇨🇳 116.16.47.71

🇮🇩 114.79.22.112

🇷🇴 92.118.39.62

🇳🇱 91.92.40.5

🇰🇬 89.237.196.124

🇷🇺 81.211.72.167

🇺🇸 68.235.62.179

🇮🇪 52.169.217.131

🇬🇧 45.82.76.122

🇺🇸 40.119.28.203