JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.39.60

104.207.39.60 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.39.60

Whois 104.207.39.60

IP Abuse Reports for 104.207.39.60:

This IP address has been reported a total of 132 times from 18 distinct sources. 104.207.39.60 was first reported on June 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-11 17:12:42 (2 months ago)	Forum/form spam	Web Spam
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-03-08 08:41:02 (3 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-02-24 18:55:37 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2026-02-03 00:47:33 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 fbarela	2026-01-24 22:00:53 (5 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 Gabriel Camargo	2025-12-26 07:00:42 (6 months ago)	104.207.39.60 - - [26/Dec/2025:02:00:30 -0500] "GET /app/e2portal/ HTTP/1.1" 301 178 "https://www.go ... show more 104.207.39.60 - - [26/Dec/2025:02:00:30 -0500] "GET /app/e2portal/ HTTP/1.1" 301 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 104.207.39.60 - - [26/Dec/2025:02:00:34 -0500] "GET /app/e2portal/ HTTP/1.1" 301 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 104.207.39.60 - - [26/Dec/2025:02:00:41 -0500] "GET /app/e2portal/ HTTP/1.1" 301 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
Anonymous	2025-12-22 16:07:12 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇫🇷 mrcrassi	2025-12-10 02:08:41 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2025-11-28 16:57:30 (7 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:34:39 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.60 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:34:34.976365 2025] [security2:error] [pid 22178:tid 22178] [client 104.207.39.60:10465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kingstoneproperties.com"] [uri "/.env"] [unique_id "aSQKirKdnoNeNRDdBE8oJAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:52:04 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.60 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:28.105151 2025] [security2:error] [pid 10675:tid 10675] [client 104.207.39.60:30381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.synergystudios.org"] [uri "/.env"] [unique_id "aSPkUCN1s7Zo8b2JLfPMDQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:23:18 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.39.60 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.39.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:23:12.492139 2025] [security2:error] [pid 4835:tid 4835] [client 104.207.39.60:43245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.whatifandwhynot.xyz"] [uri "/.svn/wc.db"] [unique_id "aSPdsD1VXDKHQYJTuVVGsgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 00:30:58 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 Psycho Solutions LLC	2025-11-07 23:20:30 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 11/7/2025 11:20 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2404:6800:4000:1006::12a

🇩🇰 193.180.210.48

🇰🇷 121.168.139.251

🇲🇲 103.59.163.132

🇱🇹 81.30.98.142

🇨🇦 15.195.21.21

🇮🇳 2404:6800:4000:1001::125

🇦🇺 223.27.17.37

🇲🇽 187.212.40.215

🇨🇱 186.64.123.124

🇨🇳 180.76.147.239

🇯🇵 157.101.161.221

🇰🇷 112.219.151.50

🇨🇳 106.113.17.235

🇧🇬 78.128.113.22

🇺🇸 64.62.156.116

🇪🇸 46.6.127.33

🇷🇺 31.173.2.33

🇺🇸 23.127.209.210

🇺🇸 2620:18c:0:192::e0:153