JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.60.241

104.207.60.241 was found in our database!

This IP was reported 133 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.60.241

Whois 104.207.60.241

IP Abuse Reports for 104.207.60.241:

This IP address has been reported a total of 133 times from 18 distinct sources. 104.207.60.241 was first reported on June 4th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-05-27 19:07:19 (3 weeks ago)	Known malicious PHP file or CMS probe	Web App Attack
🇵🇱 sefinek.net	2026-02-25 22:00:01 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-01-05 20:06:35 (5 months ago)	Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 el-brujo	2026-01-01 15:36:05 (5 months ago)	[Thu Jan 01 16:36:03.559184 2026] [proxy_fcgi:error] [pid 3722932:tid 3723597] [remote 104.207.60.24 ... show more [Thu Jan 01 16:36:03.559184 2026] [proxy_fcgi:error] [pid 3722932:tid 3723597] [remote 104.207.60.241:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Thu Jan 01 16:36:04.668281 2026] [proxy_fcgi:error] [pid 3722932:tid 3723615] [remote 104.207.60.241:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-20 11:46:03 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-19 08:08:30 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 Burayot	2025-12-12 17:24:55 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.60.241 (CA/Canada/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.60.241 (CA/Canada/-): 1 in the last 3600 secs show less	Web App Attack
🇬🇧 SilverZippo	2025-12-04 12:13:45 (6 months ago)	Web App Attack	Web App Attack
Anonymous	2025-11-27 12:17:07 (6 months ago)	Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report t ... show more Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 Psycho Solutions LLC	2025-11-24 10:28:08 (6 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 11/24/2025 10:28 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:39:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:39:17.591959 2025] [security2:error] [pid 8944:tid 8944] [client 104.207.60.241:20993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mmipro.com"] [uri "/.env"] [unique_id "aSQLpeMi2i4wASVh1AHWmAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:17:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:17:07.261623 2025] [security2:error] [pid 3454309:tid 3454309] [client 104.207.60.241:46393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lightningbug.farm"] [uri "/.svn/wc.db"] [unique_id "aSQGc9v9qhkbzmYzFXpYZAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:37:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.60.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.60.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:37:35.726610 2025] [security2:error] [pid 9353:tid 9353] [client 104.207.60.241:56373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rallyegroup.com"] [uri "/.env"] [unique_id "aSPhD6dRcwS8rDbmc0W7PwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-06 20:52:00 (7 months ago)	Unauthorized connection attempt	Brute-Force
🇩🇪 Admins@FBN	2025-10-18 18:32:57 (8 months ago)	FW-PortScan: Traffic Blocked srcport=56039 dstport=22	Port Scan Hacking SSH

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::120

🇦🇺 61.68.68.36

🇺🇸 52.165.80.115

🇲🇴 27.109.233.64

🇫🇷 194.163.137.135

🇺🇸 137.184.26.62

🇧🇬 83.147.240.60

🇳🇱 45.148.10.157

🇨🇳 14.103.112.103

🇲🇾 2001:e68:5451:4a8:ed17:e11d:88fe:c8b9

🇳🇱 212.56.48.12

🇧🇪 198.235.24.182

🇷🇺 195.218.157.226

🇩🇪 167.94.146.54

🇳🇱 91.92.40.48

🇫🇷 62.171.171.183

🇫🇷 51.159.111.44

🇫🇷 51.158.120.121

🇭🇰 199.45.155.105

🇺🇸 172.237.156.201