This IP address has been reported a total of
135
times from
14 distinct
sources.
104.207.60.81 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show moreHoneypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.81
2 ...
show moreThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.81
2026-05-02 00:09:27 /
2026-05-02 00:14:29 /
2026-05-02 00:03:50 /
show less
ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.81
2 ...
show moreThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.81
2026-05-01 00:00:05 /
2026-05-01 00:00:45 /
2026-05-01 00:08:21 /
2026-05-01 00:00:43 /
2026-05-01 00:02:44 /
show less
ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.81
2 ...
show moreThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.60.81
2026-04-30 08:36:30 /
2026-04-30 08:31:40 /
2026-04-30 08:36:36 /
2026-04-30 08:37:02 /
2026-04-30 08:33:34 /
show less
Web App Attack
Anonymous
Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ...
show moreAttempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Blocked by UFW (TCP on 80)
Source port: 52513
TTL: 54
Packet length: 60
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 52513
TTL: 54
Packet length: 60
TOS: 0x00
This report (for 104.207.60.81) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(mod_security) mod_security (id:210492) triggered by 104.207.60.81 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210492) triggered by 104.207.60.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:24:20.498364 2025] [security2:error] [pid 10856:tid 10856] [client 104.207.60.81:26747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/.env"] [unique_id "aVICdML5MEENSn1VMdEJ8wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Attempted brute force login to web vpn 189 time(s); last attempt for 2025.12.21 is noted in report t ...
show moreAttempted brute force login to web vpn 189 time(s); last attempt for 2025.12.21 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report t ...
show moreAttempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report timestamp
show less