JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.231

104.207.61.231 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.231

Whois 104.207.61.231

IP Abuse Reports for 104.207.61.231:

This IP address has been reported a total of 125 times from 17 distinct sources. 104.207.61.231 was first reported on June 4th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-06-12 00:52:16 (1 day ago)	(mod_security) mod_security (id:900001) triggered by 104.207.61.231: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 104.207.61.231: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 03:52:15.323827 2026] [security2:error] [pid 52837:tid 52985] [client 104.207.61.231:12225] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: tavernadimitris.com"] [severity "CRITICAL"] [tag "security"] [hostname "tavernadimitris.com"] [uri "/wp-login.php"] [unique_id "aitYP6xogjHUCwCkDflbZAAAAIU"], referer: https://tavernadimitris.com/wp-login.php show less	Port Scan
🇫🇷 ELYAZ	2026-06-10 06:12:55 (3 days ago)	(y4) Failed scan -byebye- from 104.207.61.231 (CA/Canada/-): (CF_ENABLE)	Hacking
🇪🇸 10dencehispahard SL	2026-01-23 07:39:19 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-01-17 08:30:50 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 03:30:46.162109 2026] [security2:error] [pid 27073:tid 27073] [client 104.207.61.231:53905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.greensealusa.com"] [uri "/.env"] [unique_id "aWtItoOwdtAeYdtWh3auHwAAADI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 03:28:43 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:28:36.197034 2026] [security2:error] [pid 29092:tid 29092] [client 104.207.61.231:25273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thepercussionworks.com"] [uri "/.env"] [unique_id "aWsB5EMtI5wQpLr7jq3b1AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-11-24 15:27:19 (6 months ago)	Form spam	Web Spam
🇱🇻 garmtech.com	2025-11-19 18:52:07 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-52.104.207.61.231.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-52.104.207.61.231.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇵🇱 sefinek.net	2025-11-17 18:42:18 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-19 15:36:40 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 08:49:22 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 21:23:45 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-10-01 00:28:52 (8 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-04-06 17:05:13 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 23:34:10 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 20:49:43 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.146

🇺🇸 152.32.206.87

🇬🇧 35.203.210.151

🇨🇦 198.44.157.114

🇲🇦 196.119.7.207

🇬🇧 195.140.214.23

🇧🇷 191.235.101.61

🇫🇮 147.185.133.93

🇨🇦 85.217.149.66

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇳🇱 195.178.110.30

🇳🇱 176.65.148.229

🇺🇸 162.216.150.215

🇸🇬 159.26.115.64

🇮🇳 152.32.156.138

🇺🇸 130.211.113.209

🇨🇳 42.51.32.228

🇭🇰 35.220.233.158

🇧🇷 20.206.89.121