JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.243

104.207.61.243 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.243

Whois 104.207.61.243

IP Abuse Reports for 104.207.61.243:

This IP address has been reported a total of 126 times from 17 distinct sources. 104.207.61.243 was first reported on June 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-05-28 23:06:21 (3 weeks ago)	Scanning/Probing (34)	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-05-27 23:31:12 (3 weeks ago)	[Thu May 28 09:31:11.086017 2026] [security2:error] [pid 504824] [client 104.207.61.243:35921] [clie ... show more [Thu May 28 09:31:11.086017 2026] [security2:error] [pid 504824] [client 104.207.61.243:35921] [client 104.207.61.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/wp-config.php.old"] [unique_id "ahd-vxM4mGQnasvZVIgswgAAAAU"] ... show less	Web App Attack
🇺🇸 Matthew Ping	2026-05-25 09:15:02 (3 weeks ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇵🇱 IROK	2025-12-31 16:18:58 (5 months ago)	Malware/WebShell Scan blocked by ModSecurity ...	Hacking
Anonymous	2025-12-21 19:16:37 (5 months ago)	Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 234 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:28:36 (6 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇦🇺 MAGIC	2025-12-07 00:01:39 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-12-01 23:17:26 (6 months ago)	Attempted brute force login to web vpn 900 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 900 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-30 23:28:13 (6 months ago)	Attempted brute force login to web vpn 937 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 937 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:52:50 (6 months ago)	Attempted brute force login to web vpn 1170 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 1170 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:40:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:40:40.222719 2025] [security2:error] [pid 16464:tid 16600] [client 104.207.61.243:16431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.giere.org"] [uri "/.git/HEAD"] [unique_id "aSQoGOt9535l6Z-c96sKZgAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:43:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:43:26.418479 2025] [security2:error] [pid 2787:tid 2787] [client 104.207.61.243:26031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alecmcatee.com"] [uri "/.svn/wc.db"] [unique_id "aSQarjzRPY_5WBmyBn9YJAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2025-11-24 07:23:56 (6 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:46:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:46:17.889897 2025] [security2:error] [pid 13944:tid 13944] [client 104.207.61.243:27065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cctaxpro.com"] [uri "/.svn/wc.db"] [unique_id "aSPjGQ042FgeYbnb_bxq0QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 23:54:47 (7 months ago)	Attempted brute force login to web vpn 270 time(s); last attempt for 2025.11.18 is noted in report t ... show more Attempted brute force login to web vpn 270 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.202

🇸🇬 128.199.118.234

🇳🇱 89.21.67.138

🇫🇷 85.217.140.47

🇧🇪 198.235.24.208

🇺🇸 162.216.150.167

🇳🇱 89.21.67.155

🇬🇧 54.38.147.98

🇩🇪 45.130.203.158

🇷🇴 2.57.122.177

🇮🇩 202.51.214.99

🇹🇷 185.153.231.45

🇨🇦 85.217.149.12

🇫🇷 85.217.140.32

🇯🇴 37.220.121.29

🇺🇸 216.25.89.104

🇩🇪 213.209.159.225

🇧🇷 191.53.242.124

🇺🇸 162.216.149.127

🇺🇸 152.32.205.184