JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.61.70

104.207.61.70 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.61.70

Whois 104.207.61.70

IP Abuse Reports for 104.207.61.70:

This IP address has been reported a total of 132 times from 18 distinct sources. 104.207.61.70 was first reported on June 7th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-23 23:48:45 (1 week ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 LARL-Stompro-2024	2026-02-03 18:37:54 (4 months ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇨🇭 backslash	2026-01-21 20:20:04 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-01-05 20:15:31 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇬🇧 spamverify.com	2026-01-02 02:39:45 (5 months ago)	Honeypot Hit: Port Scan (80) HTTP	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2025-12-30 20:36:25 (5 months ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:50:08 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:50:02.333752 2025] [security2:error] [pid 8201:tid 8201] [client 104.207.61.70:53461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edensgroup.com"] [uri "/.git/HEAD"] [unique_id "aVIWitkL9xb0DsfSHAppZAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:21:32 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:21:26.305086 2025] [security2:error] [pid 30400:tid 30400] [client 104.207.61.70:48015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richmondrents.com"] [uri "/.env"] [unique_id "aVIBxlDkkE56YCFk9rXPGgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 03:57:19 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:57:15.171078 2025] [security2:error] [pid 12555:tid 12555] [client 104.207.61.70:54471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2pollards.com"] [uri "/.svn/wc.db"] [unique_id "aVH8G8wG1l2V0p6VqU7iJQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 03:33:16 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.61.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:33:12.150343 2025] [security2:error] [pid 21681:tid 21681] [client 104.207.61.70:18141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "castagnino.com"] [uri "/.env"] [unique_id "aVH2eOWKW9bBQ5fSqT1pJAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2025-12-19 00:11:49 (5 months ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-12-09 20:09:08 (5 months ago)	(From [email protected]) Forget complex side hustles. The Writing Wizard system gives you th ... show more (From [email protected]) Forget complex side hustles. The Writing Wizard system gives you the simple templates to earn consistent income from home just by writing short, 3-sentence letters. No experience needed, no selling—just easy money at your own pace. Click to Learn the Secret & Start Earning! https://themoneyfromhome.com show less	Phishing Web Spam
🇪🇸 10dencehispahard SL	2025-12-03 07:33:43 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 nowyouknow	2025-11-21 15:13:48 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so, coun ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> THEmoneyfromhome.com show less	Phishing Web Spam
🇱🇻 garmtech.com	2025-10-25 21:11:31 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-11.104.207.61.70.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-11.104.207.61.70.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 185.203.236.212

🇨🇭 185.125.25.8

🇸🇪 138.124.250.207

🇰🇷 119.209.12.20

🇮🇩 103.125.103.201

🇮🇳 103.21.79.242

🇷🇺 95.188.92.182

🇬🇧 89.37.172.141

🇬🇧 77.102.210.168

🇳🇱 45.148.10.147

🇨🇳 36.35.162.244

🇨🇳 8.129.31.161

🇮🇳 182.95.43.86

🇲🇾 180.74.84.64

🇺🇸 172.202.117.124

🇵🇭 150.228.183.33

🇦🇺 144.172.65.193

🇵🇰 119.73.8.71

🇨🇳 117.72.170.141

🇺🇸 104.233.13.206