JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.61

104.207.61.61 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.61

Whois 104.207.61.61

IP Abuse Reports for 104.207.61.61:

This IP address has been reported a total of 112 times from 13 distinct sources. 104.207.61.61 was first reported on June 13th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-20 00:45:56 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇷 masterguru	2026-04-06 11:33:11 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.61 (CA/Canada/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.61 (CA/Canada/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-03-27 10:24:59 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.61 (CA/Canada/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.61.61 (CA/Canada/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 stinpriza	2026-03-23 21:53:24 (2 months ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-03-15 01:19:44 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2025-12-29 08:57:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:57:10.991526 2025] [security2:error] [pid 25434:tid 25434] [client 104.207.61.61:37391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cartoonchristmascard.com"] [uri "/.env"] [unique_id "aVJCZlLdUmVzPOUnKxwlBgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:30:26 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:30:23.181004 2025] [security2:error] [pid 31975:tid 31975] [client 104.207.61.61:52217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmlogistics.com"] [uri "/.svn/wc.db"] [unique_id "aVIR70HCKL1rIutkrihHLwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (5 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-11-26 11:15:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:15:16.641749 2025] [security2:error] [pid 29790:tid 29790] [client 104.207.61.61:53585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.randymeisner.com"] [uri "/.env"] [unique_id "aSbhRK0Aa3X7acKRVJLhewAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:40:02 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:39:59.064282 2025] [security2:error] [pid 3447:tid 3447] [client 104.207.61.61:37081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.foodnest.com.polydorou.eu"] [uri "/.git/HEAD"] [unique_id "aSbY_-_NxEWQ8LTRLpUs_wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:10:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:10:46.432799 2025] [security2:error] [pid 26951:tid 26951] [client 104.207.61.61:51235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.elgarage.com.mx"] [uri "/.git/HEAD"] [unique_id "aSaZ5nmGrNXAN9tt0k3qTAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:19:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:19:52.575433 2025] [security2:error] [pid 22820:tid 22820] [client 104.207.61.61:21677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guitarwisdom.com"] [uri "/.svn/wc.db"] [unique_id "aSZVuDdekzr-lZMhIbRSkwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:59:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:59:29.280574 2025] [security2:error] [pid 21369:tid 21369] [client 104.207.61.61:30539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kentuckianacordcutters.com"] [uri "/.git/HEAD"] [unique_id "aSQecc_f7_d3UT7LoEUoIwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 05:11:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:11:41.702985 2025] [security2:error] [pid 20061:tid 20061] [client 104.207.61.61:32683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.headcasebaby.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRQXDSExgv9Po0b6b1XbuAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-07 05:47:27 (1 year ago)	Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 183.82.108.109

🇨🇳 121.229.9.97

🇵🇭 2001:4454:73c:bd00:1c36:ca8e:f96f:5a2f

🇪🇬 197.50.107.122

🇺🇸 195.184.76.177

🇺🇸 64.31.18.133

🇩🇪 57.129.115.204

🇧🇷 45.205.1.76

🇳🇱 45.198.224.141

🇦🇪 31.218.3.119

🇺🇸 18.190.15.50

🇨🇳 223.151.74.115

🇵🇾 186.2.232.63

🇺🇸 172.178.115.16

🇩🇪 167.94.145.24

🇭🇰 119.28.9.170

🇨🇦 85.217.149.38

🇺🇸 71.19.150.18

🇩🇪 68.183.212.68

🇺🇸 50.46.141.125