This IP address has been reported a total of
140
times from
25 distinct
sources.
104.207.60.34 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
[da.kdns.gr] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide ...
show more[da.kdns.gr] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide=true | distinct_ips=20 | /wp-login.php
show less
WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 104.207.60.34 - - [29/May/2026:03:45:55 +0100] P ...
show moreWP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 104.207.60.34 - - [29/May/2026:03:45:55 +0100] POST /wp-login.php HTTP/1.1 200 6872 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15
show less
[ThuMay2802:00:01.5202522026][security2:error][pid3945718:tid3945787][client104.207.60.34:0]ModSecur ...
show more[ThuMay2802:00:01.5202522026][security2:error][pid3945718:tid3945787][client104.207.60.34:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mgpublishing.ch\"][uri\"/xmlrpc.php\"][unique_id\"aheFge3Ea1WYV1kjRuqGqwAAAIg\"]\,referer:https://www.google.com/search\?q=wordpress
show less
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
Attempted brute force login to web vpn 18 time(s); last attempt for 2026.01.05 is noted in report ti ...
show moreAttempted brute force login to web vpn 18 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-40.104.207.60.34.web-spamme ...
show moreIM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-40.104.207.60.34.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
Anonymous
Attempted brute force login to web vpn 2142 time(s); last attempt for 2025.11.27 is noted in report ...
show moreAttempted brute force login to web vpn 2142 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less