This IP address has been reported a total of
122
times from
19 distinct
sources.
104.207.60.56 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Web attack
Bad Web Bot
Web App Attack
Anonymous
(wordpress) Failed wordpress login from 104.207.60.56 (CA/Canada/-)
(mod_security) mod_security (id:225170) triggered by 104.207.60.56 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:225170) triggered by 104.207.60.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 09:55:12.477597 2026] [security2:error] [pid 24615:tid 24615] [client 104.207.60.56:22957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bouldercorporate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bouldercorporate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZh10PbeqzgCiBWKQVF6TQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-12-29T02:51:20.682524+02:00 zanati wp(www.sahpa.co.za)[398165]: Blocked authentication attempt ...
show more2025-12-29T02:51:20.682524+02:00 zanati wp(www.sahpa.co.za)[398165]: Blocked authentication attempt for [email protected] from 104.207.60.56
...
show less
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
Scanning for installed WordPress and vulnerabilities
104.207.60.56 [04/Dec/2025:03:49:08] "GET /wp-l ...
show moreScanning for installed WordPress and vulnerabilities
104.207.60.56 [04/Dec/2025:03:49:08] "GET /wp-login.php HTTP/1.1"
show less
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.04.07 is noted in report timestamp
show less
(mod_security) mod_security (id:210740) triggered by 104.207.60.56 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210740) triggered by 104.207.60.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 01:20:04.471754 2025] [security2:error] [pid 36373:tid 36373] [client 104.207.60.56:10825] [client 104.207.60.56] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||virtualmediamasters.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "virtualmediamasters.net"] [uri "/"] [unique_id "Z_NghGo0NhOn5_HbeQT-jwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report tim ...
show moreAttempted brute force login to web vpn 4 time(s); last attempt for 2025.04.06 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.05 is noted in report tim ...
show moreAttempted brute force login to web vpn 7 time(s); last attempt for 2025.04.05 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 7 time(s); last attempt for 2025.04.04 is noted in report tim ...
show moreAttempted brute force login to web vpn 7 time(s); last attempt for 2025.04.04 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report tim ...
show moreAttempted brute force login to web vpn 5 time(s); last attempt for 2025.04.03 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report tim ...
show moreAttempted brute force login to web vpn 5 time(s); last attempt for 2025.04.02 is noted in report timestamp
show less
Hacking
Brute-Force
Showing 1 to
15
of 122 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩