JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.242

104.207.61.242 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.242

Whois 104.207.61.242

IP Abuse Reports for 104.207.61.242:

This IP address has been reported a total of 139 times from 21 distinct sources. 104.207.61.242 was first reported on June 6th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-08-31 11:13:57 (1 day ago)	cloudlinux2 fail2ban: 2026-08-31 13:09:26,303 fail2ban.filter [1605]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-31 13:09:26,303 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 104.207.36.8 - 2026-08-31 13:09:25cloudlinux2 fail2ban: 2026-08-31 13:09:54,678 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 104.207.54.126 - 2026-08-31 13:09:54cloudlinux2 fail2ban: 2026-08-31 13:10:14,016 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 104.207.47.229 - 2026-08-31 13:10:13cloudlinux2 fail2ban: 2026-08-31 13:10:34,869 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 104.207.61.242 - 2026-08-31 13:10:34cloudlinux2 fail2ban: 2026-08-31 13:10:33,173 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 151.123.177.197 - 2026-08-31 13:10:32cloudlinux2 fail2ban: 2026-08-31 13:10:36,894 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 217.181.92.81 - 2026-08-31 13:10:36cloudlinux2 fail2ban: 2026-08-31 13:10:33,876 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 45.3.55.255 - 2026-08-31 13:10:33cloudli show less	Web App Attack
🇫🇷 ELYAZ	2026-08-30 07:14:39 (2 days ago)	(wordpress) Failed wordpress login from 104.207.61.242 (CA/Canada/-): (CF_ENABLE)	Brute-Force
🇮🇹 VHosting	2026-08-21 21:55:05 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇪🇸 librebit	2026-06-24 03:17:47 (2 months ago)	Brute force	Brute-Force
🇬🇧 PeravixGroup	2026-05-22 13:19:41 (3 months ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-16 23:20:51 (3 months ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.61.24 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.61.242 2026-05-16 22:10:05 /?debug=command&expression=%23context%5b%22xwork.MethodAccessor.denyMethodExecution%22%5d%3dfalse%2c%23f%3d%23_memberAccess.getClass%28%29.getDeclaredField%28%22allowStaticMethodAccess%22%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue%29%2c%23a%[email protected]@getRuntime%28%29.exec%28%22netstat%20-an%22%29.getInputStream%28%29%2c%23b%3dnew%20java.io.InputStreamReader%28%23a%29%2c%23c%3dnew%20java.io.BufferedReader%28%23b%29%2c%23d%3dnew%20char%5b50000%5d%2c%23c.read%28%23d%29%2c%23genxor%3d%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%2c%23genxor.println%28%23d%29%2c%23genxor.flush%28%29%2c%23genxor.close%28%29 2026-05-16 13:10:11 /geoserver/rest.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-20 23:15:22 (4 months ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.61.242 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.61.242 2026-04-20 03:30:43 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-31 23:42:14 (7 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.61.242 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.61.242 2026-01-31 13:01:05 /nacos/%23/serviceSync show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-19 00:22:28 (7 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.61.242 2 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.61.242 2026-01-18 04:50:43 /jeecg-boot/actuator/ 2026-01-18 04:50:42 /actuator show less	Web App Attack
Anonymous	2026-01-03 13:39:23 (7 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 10dencehispahard SL	2025-11-26 10:22:08 (9 months ago)	Bot scanning for environment files .env	Web Spam Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 23:01:04 (9 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 06:17:08 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:16:58.281646 2025] [security2:error] [pid 29626:tid 29626] [client 104.207.61.242:32625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mena365.gulftelecom.com"] [uri "/.svn/wc.db"] [unique_id "aSVJ2qUBhI9EHaYuwNITRwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:28:22 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:28:16.132212 2025] [security2:error] [pid 5069:tid 5069] [client 104.207.61.242:39337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onlinesuretybonds.com"] [uri "/.svn/wc.db"] [unique_id "aSUwYKRQBw3OVKMxcOGYfQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:03:32 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:26.894606 2025] [security2:error] [pid 16935:tid 16935] [client 104.207.61.242:22009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.larkinplumbingservice.com"] [uri "/.git/HEAD"] [unique_id "aSUcfvBXo-xaXOUKWXM-BAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.25.89.208

🇨🇳 125.115.209.200

🇬🇧 2a00:1450:4009:c01::127

🇬🇧 195.96.139.253

🇩🇪 188.137.234.248

🇨🇳 183.197.196.12

🇨🇳 114.217.53.0

🇨🇳 101.126.11.137

🇺🇦 91.242.199.192

🇫🇷 52.47.83.211

🇬🇹 45.191.245.190

🇭🇰 34.92.64.161

🇺🇸 23.95.191.253

🇵🇱 172.64.198.4

🇮🇳 165.22.212.94

🇺🇸 157.230.173.88

🇦🇷 45.230.205.39

🇧🇩 118.179.208.59

🇫🇷 85.217.140.11

🇪🇸 85.50.121.120