JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.60.212

104.207.60.212 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.60.212

Whois 104.207.60.212

IP Abuse Reports for 104.207.60.212:

This IP address has been reported a total of 147 times from 22 distinct sources. 104.207.60.212 was first reported on June 22nd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-04-23 23:25:48 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.212 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.212 2026-04-23 06:42:48 /static/images/ 2026-04-23 06:42:56 /static/images/ 2026-04-23 06:42:51 /code 2026-04-23 06:47:24 /static/ 2026-04-23 06:42:58 /index.html 2026-04-23 06:42:52 /index.html 2026-04-23 06:42:54 /index.html 2026-04-23 06:36:10 /cabo show less	Web App Attack
🇺🇸 mnsf	2026-03-27 01:06:15 (2 months ago)	Too many Status 40X (12) Scanning/Probing (12)	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-02-28 16:37:44 (3 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇳🇱 jjnxpct	2026-01-03 04:48:14 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: / (Rule ID: 932230) - Remote Command Execution: Unix Command Injection (2-3 chars) show less	SQL Injection Web App Attack
🇫🇷 SpaceHost-Server	2025-12-31 23:27:10 (5 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2025-12-30 23:26:54 (5 months ago)		Brute-Force Web App Attack
Anonymous	2025-12-21 13:16:43 (5 months ago)	Attempted brute force login to web vpn 270 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 270 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 22:53:05 (5 months ago)	Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 144 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 myagent.site	2025-12-17 12:40:12 (5 months ago)	Blocking for trying to access an exploit file: /wordpress//installer.php	Hacking
🇺🇸 TPI-Abuse	2025-12-09 08:47:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 03:47:05.762163 2025] [security2:error] [pid 21702:tid 21702] [client 104.207.60.212:34927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stellabluesales.com"] [uri "/.git/HEAD"] [unique_id "aTfiCRCgXh8mTw6yR4TiLgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-08 18:30:15 (6 months ago)	wordpress-trap	Web App Attack
🇦🇺 2000cn.com.au	2025-12-08 05:23:33 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
Anonymous	2025-12-07 13:19:29 (6 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 13:59:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:59:28.053229 2025] [security2:error] [pid 15096:tid 15096] [client 104.207.60.212:46725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nashes.net"] [uri "/.env"] [unique_id "aTQ2wJN36aNbapc7eNZkRAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-12-05 16:56:24 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.60.212 (CA/Canada/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.60.212 (CA/Canada/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.5.200.98

🇭🇰 154.219.114.33

🇬🇧 45.89.242.131

🇩🇪 213.209.159.60

🇺🇸 193.31.35.13

🇷🇺 176.211.16.192

🇸🇪 171.25.158.47

🇺🇸 138.113.23.170

🇨🇳 113.31.103.129

🇧🇩 103.183.62.2

🇩🇪 64.226.82.4

🇳🇱 45.148.10.147

🇺🇸 45.33.93.17

🇺🇸 34.127.111.137

🇳🇱 5.61.209.43

🇩🇪 213.209.159.242

🇩🇪 157.230.125.80

🇺🇸 154.83.197.29

🇨🇳 125.124.226.217

🇮🇳 125.19.162.70