JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.60.200

104.207.60.200

Recent Activity

154 reports found in our database

40% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

3xK Tech GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200373

Domain Name

3xktech.cloud

Country

🇨🇦 Canada

City

Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.207.60.200:

This IP address has been reported a total of 154 times from 27 distinct sources. 104.207.60.200 was first reported on April 11th 2022, and the most recent report was 13 hours ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; France with 2 reports; United States of America with 2 reports. The most common categories in these recent reports were: Web App Attack 8 times; Hacking 2 times; Brute-Force 1 time; SQL Injection 1 time; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-08-29 19:02:41 (13 hours ago)	[SatAug2921:02:38.2068912026][security2:error][pid3117023:tid3117296][client104.207.60.200:0]ModSecu ... show more [SatAug2921:02:38.2068912026][security2:error][pid3117023:tid3117296][client104.207.60.200:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?i$$\?:\^\\|[\^a-z0-9_-]$$\?:localhost\\|localhost\\\\\\\\.localdomain\\|ip6-localhost\\|ip6-loopback$$\?:\$\\|[\^a-z0-9_-]$\"atARGS:pwd.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"115\"][id\"990007\"][msg\"SSRFattempttolocalhosthostnameblocked\"][hostname\"cadvending.ch\"][uri\"/wp-login.php\"][unique_id\"apMszh0hB99oTdWsFINduwAAAUI\"]\,referer:https://cadvending.ch/wp-login.php show less	Hacking Web App Attack
🇭🇷 bubausluge	2026-08-23 10:30:06 (6 days ago)	Blocked by https://aegis.hr — Botnet: kritična agregirana kampanja - (MITRE T1110), 53 attempts, Per ... show more Blocked by https://aegis.hr — Botnet: kritična agregirana kampanja - (MITRE T1110), 53 attempts, Period: 2026-08-23 07:49:54 to 2026-08-23 07:52:03 show less	Hacking
Anonymous	2026-08-22 21:01:49 (1 week ago)	104.207.60.200 - - [23/Aug/2026:05:01:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "https://t.co/" ... show more 104.207.60.200 - - [23/Aug/2026:05:01:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "https://t.co/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 georgengelmann	2026-08-22 03:27:15 (1 week ago)	Failed login attempt for brezz_n2	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-08-21 20:00:07 (1 week ago)	Wordfence waf block on madesimpleskincare	Web App Attack
🇫🇷 Sklurk	2026-08-14 08:45:38 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 IRISIO	2026-07-27 07:15:55 (1 month ago)	scans/SQL injection/spam posts : 1 queries	Web App Attack SQL Injection
🇺🇸 JustMeHere	2026-07-05 23:11:25 (1 month ago)	[Sun Jul 05 19:10:54.764922 2026] [security2:error] [pid 4001:tid 4139] [client 104.207.60.200:24987 ... show more [Sun Jul 05 19:10:54.764922 2026] [security2:error] [pid 4001:tid 4139] [client 104.207.60.200:24987] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "learn.kiwiconsulting.yorknation.com"] [uri "/.env.dist"] [unique_id "akrkfrxAcLilJ53QH9_mGwAAAFE"] ... show less	Web App Attack
🇩🇪 iNetWorker	2026-07-05 17:56:09 (1 month ago)	trolling for resource vulnerabilities	Web App Attack
🇪🇸 librebit	2026-06-25 00:04:58 (2 months ago)	Brute force	Brute-Force
Anonymous	2026-06-16 03:08:40 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 oncord	2025-12-29 07:50:18 (8 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-11-26 00:56:32 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.60.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.207.60.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:56:25.439445 2025] [security2:error] [pid 14170:tid 14170] [client 104.207.60.200:46025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|admin.turedinmobiliaria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSZQOR0jWPfwsfFSMS6HUAAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2025-04-08 03:40:11 (1 year ago)	sae-12 : Block return, carriage return, ... characters=>/index.php?Itemid=510&catid=82&id=14 ... show more sae-12 : Block return, carriage return, ... characters=>/index.php?Itemid=510&catid=82&id=147%3Acomite-intergares-sncf%27&option=com_content&amp...(') show less	Hacking
Anonymous	2025-04-07 12:19:18 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 119.99.88.227

🇨🇦 70.38.95.45

🇺🇸 66.132.172.114

🇺🇸 205.210.31.91

🇩🇰 130.49.188.205

🇰🇷 112.219.151.50

🇸🇬 47.128.30.73

🇺🇸 20.46.235.47

🇧🇷 205.210.31.185

🇵🇱 194.180.48.47

🇺🇸 192.198.109.103

🇬🇧 185.216.145.171

🇺🇦 185.76.71.100

🇨🇳 182.43.235.218

🇷🇺 95.46.179.120

🇳🇱 91.92.42.11

🇩🇪 80.187.101.222

🇱🇹 62.60.130.201

🇲🇾 47.250.162.17

🇨🇦 34.95.59.162