JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.28

104.207.61.28 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.28

Whois 104.207.61.28

IP Abuse Reports for 104.207.61.28:

This IP address has been reported a total of 114 times from 9 distinct sources. 104.207.61.28 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-03-30 00:46:29 (2 months ago)	20 attempts against mh-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-30 13:20:58 (5 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:42:00 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:41:53.560354 2025] [security2:error] [pid 26917:tid 26940] [client 104.207.61.28:44087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kellenlee.com"] [uri "/.svn/wc.db"] [unique_id "aVIisexlEzhaD-qftZW70QAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:31:57 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:31:50.666579 2025] [security2:error] [pid 23675:tid 23675] [client 104.207.61.28:59121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title-26.com"] [uri "/.git/HEAD"] [unique_id "aVIENjz1zuvXCyMh3R4lBwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:32:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:32:22.404076 2025] [security2:error] [pid 16220:tid 16220] [client 104.207.61.28:14403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schunagroup.com"] [uri "/.env"] [unique_id "aS8-xp42J8qd0gv3jDLkowAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:29:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:29:31.361139 2025] [security2:error] [pid 12602:tid 12602] [client 104.207.61.28:38031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "no1sicko.com"] [uri "/.git/HEAD"] [unique_id "aS8F24e8Ouorrqu3krIM7AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 12:39:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:39:23.312729 2025] [security2:error] [pid 424358:tid 424460] [client 104.207.61.28:25263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conceptsinammunition.com"] [uri "/.git/HEAD"] [unique_id "aS7d-_p__Pmf5kEIOQCL_gAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-27 13:37:01 (6 months ago)	Attempted brute force login to web vpn 1135 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 1135 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-18 23:25:12 (6 months ago)	Attempted brute force login to web vpn 360 time(s); last attempt for 2025.11.18 is noted in report t ... show more Attempted brute force login to web vpn 360 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 08:58:43 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-06 19:34:18 (1 year ago)	Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report tim ... show more Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-05 22:38:08 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-04 14:47:59 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-03 16:51:06 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.03 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-02 19:28:23 (1 year ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.02 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 217.217.248.93

🇨🇳 180.76.243.197

🇺🇸 162.216.150.190

🇺🇸 113.20.4.9

🇨🇳 222.223.62.8

🇺🇸 162.216.149.238

🇳🇱 141.11.62.125

🇳🇱 81.19.216.109

🇹🇭 49.231.192.36

🇳🇱 45.142.193.9

🇵🇱 34.118.66.154

🇳🇱 20.123.146.94

🇦🇷 186.13.24.118

🇺🇸 138.128.140.80

🇨🇳 112.32.82.14

🇯🇴 92.241.37.50

🇵🇹 85.240.193.104

🇱🇹 62.60.130.14

🇳🇱 45.142.193.53

🇺🇸 43.162.98.142