JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.60.217

104.207.60.217 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.60.217

Whois 104.207.60.217

IP Abuse Reports for 104.207.60.217:

This IP address has been reported a total of 151 times from 21 distinct sources. 104.207.60.217 was first reported on June 11th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Jean Valjean	2025-12-30 23:23:55 (5 months ago)	Fail2ban Caboom : xmlrpc.php Abuse	SQL Injection Web App Attack
🇺🇸 oncord	2025-12-29 20:47:30 (5 months ago)	Form spam	Web Spam
Anonymous	2025-12-21 20:23:06 (6 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-19 23:53:25 (6 months ago)	Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.19 is noted in report t ... show more Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.19 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 Ar1s	2025-12-18 05:35:00 (6 months ago)	[1:2009955] ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability ::: Port: 8 ... show more [1:2009955] ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability ::: Port: 80/TCP show less	Exploited Host
🇺🇸 nowyouknow	2025-12-18 02:29:20 (6 months ago)	(From [email protected]) Curious how plug-and-play emails help people make real money? Try ht ... show more (From [email protected]) Curious how plug-and-play emails help people make real money? Try https://rb.gy/uxe0l2 show less	Phishing Web Spam
🇫🇷 dynamix	2025-12-13 09:53:35 (6 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-12-01 22:37:41 (6 months ago)	Attempted brute force login to web vpn 882 time(s); last attempt for 2025.12.01 is noted in report t ... show more Attempted brute force login to web vpn 882 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force
🇮🇳 Mcshield.org	2025-12-01 06:31:49 (6 months ago)	GET /server-status HTTP/1.1" 403 - "python-requests/2.28.1"	Web Spam Port Scan Hacking
Anonymous	2025-11-30 23:59:30 (6 months ago)	Attempted brute force login to web vpn 972 time(s); last attempt for 2025.11.30 is noted in report t ... show more Attempted brute force login to web vpn 972 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-27 23:45:49 (6 months ago)	Attempted brute force login to web vpn 2540 time(s); last attempt for 2025.11.27 is noted in report ... show more Attempted brute force login to web vpn 2540 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 06:11:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:11:24.375911 2025] [security2:error] [pid 19757:tid 19757] [client 104.207.60.217:30867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nacuajo.com"] [uri "/.git/HEAD"] [unique_id "aSVIjI-Zm5jsJU0CLab5nwAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:06:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:06:15.954166 2025] [security2:error] [pid 30785:tid 30785] [client 104.207.60.217:59717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.darrinlauritzen.com"] [uri "/.env"] [unique_id "aSUdJ7YljTdSBNUdfAtqfwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:29:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:13.623305 2025] [security2:error] [pid 27727:tid 27738] [client 104.207.60.217:19691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sjstauffer.com"] [uri "/.svn/wc.db"] [unique_id "aSUUefeXMnwYTnmV60PUcgAAAMk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:05:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:05:29.991928 2025] [security2:error] [pid 574:tid 574] [client 104.207.60.217:60239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.airtechconsulting.com"] [uri "/.svn/wc.db"] [unique_id "aSTyyUnvyRAlAEYyxGSiJQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.248

🇧🇷 186.251.71.202

🇵🇰 110.93.224.226

🇺🇸 44.251.185.161

🇷🇺 178.185.136.57

🇺🇸 173.244.60.241

🇺🇸 2607:f8b0:4001:c70::128

🇺🇸 205.210.31.51

🇹🇳 197.5.145.150

🇮🇩 163.7.8.79

🇺🇸 147.185.132.28

🇺🇸 74.48.105.66

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇺🇸 44.183.26.177

🇮🇳 202.88.227.228

🇺🇸 173.194.101.21

🇺🇸 162.230.189.130

🇷🇺 94.230.136.33

🇷🇺 89.111.163.181