JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.60.206

104.207.60.206 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.60.206

Whois 104.207.60.206

IP Abuse Reports for 104.207.60.206:

This IP address has been reported a total of 132 times from 18 distinct sources. 104.207.60.206 was first reported on June 4th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-26 13:48:29 (13 hours ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=electromecanica.gr; logs=/var/log/httpd/domains/electro ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=electromecanica.gr; logs=/var/log/httpd/domains/electromecanica.gr.log; samples=site_wide=true \| distinct_ips=26 \| /wp-login.php show less	Hacking Web App Attack
🇬🇷 setupgr	2026-06-25 03:17:53 (1 day ago)	(mod_security) mod_security (id:900001) triggered by 104.207.60.206 (CA/Canada/Ontario/Toronto/-/[AS ... show more (mod_security) mod_security (id:900001) triggered by 104.207.60.206 (CA/Canada/Ontario/Toronto/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 06:17:48.355735 2026] [security2:error] [pid 358185:tid 358285] [client 104.207.60.206:57819] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ajyd3DpPCootS5mrGd6cnAAAAYs"], referer: https://villa-izabela.com/wp-login.php show less	Port Scan
🇩🇪 fleckenbase	2026-03-10 06:09:19 (3 months ago)	[Tue Mar 10 07:09:16.175436 2026] [php:notice] [pid 3383810:tid 3383810] [client 104.207.60.206:4441 ... show more [Tue Mar 10 07:09:16.175436 2026] [php:notice] [pid 3383810:tid 3383810] [client 104.207.60.206:44419] Attack: type [(16)16=3] from 104.207.60.206 redir to google [Tue Mar 10 07:09:20.202276 2026] [php:notice] [pid 3385481:tid 3385481] [client 104.207.60.206:30095] Attack: type [(17)17=3] from 104.207.60.206 redir to google ... show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-02-25 01:55:05 (4 months ago)	Web SQL inject attack from 104.207.60.206	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 03:47:40 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:47:33.005820 2026] [security2:error] [pid 7479:tid 7479] [client 104.207.60.206:37973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertanders.com"] [uri "/test/.git/config"] [unique_id "aZU2VTd-K7ABRZely-54OwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-21 12:29:03 (6 months ago)	Attempted brute force login to web vpn 198 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 198 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:54:30 (6 months ago)	Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:24:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:24:18.202679 2025] [security2:error] [pid 31223:tid 31223] [client 104.207.60.206:27791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.safetyfastclub.com"] [uri "/.svn/wc.db"] [unique_id "aSQkQqjJOEtdE0VVnb4JhgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 09:17:19 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:45:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:45:04.448119 2025] [security2:error] [pid 21300:tid 21300] [client 104.207.60.206:41033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathyquan.homehealth101.com"] [uri "/.env"] [unique_id "aSQNAB2UgG3yLPC57j4dBgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:19:56 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:19:48.529779 2025] [security2:error] [pid 6101:tid 6101] [client 104.207.60.206:59481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.interior-cosmetics.com"] [uri "/.env"] [unique_id "aSQHFLmFHWxzYpnNg1v9bQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:34:56 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:34:51.241416 2025] [security2:error] [pid 4136:tid 4136] [client 104.207.60.206:59533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ashleycroft.com"] [uri "/.svn/wc.db"] [unique_id "aSP8ixDWAgi2ONNTWpF3HgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:11:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:11:16.935601 2025] [security2:error] [pid 11775:tid 11775] [client 104.207.60.206:54377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.majersigns.com"] [uri "/.svn/wc.db"] [unique_id "aSP3BCDfftTd7a_vw4_v-AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:32:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:27.952605 2025] [security2:error] [pid 8614:tid 8614] [client 104.207.60.206:36461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.renperfco.com"] [uri "/.svn/wc.db"] [unique_id "aSPf2xRQfKWJKNm4RkTRLAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2025-11-04 17:02:57 (7 months ago)		Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 123.56.154.81

🇫🇷 85.204.70.118

🇮🇳 182.76.107.16

🇨🇳 123.150.103.165

🇨🇳 112.46.212.237

🇫🇮 74.125.46.151

🇹🇼 59.125.88.41

🇳🇱 45.148.10.157

🇨🇳 45.126.120.53

🇬🇧 35.203.211.16

🇬🇧 35.203.210.11

🇺🇸 20.65.195.109

🇨🇳 14.103.91.55

🇵🇰 223.123.73.131

🇰🇷 115.91.48.142

🇹🇷 95.2.13.99

🇵🇰 203.135.42.52

🇬🇧 193.163.125.123

🇧🇷 189.126.37.208

🇺🇸 172.239.51.109