JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.104.60.34

2.104.60.34 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	YouSee A/S
Usage Type	Fixed Line ISP
ASN	AS3292
Hostname(s)	2-104-60-34-cable.dk.customer.tdc.net
Domain Name	yousee.dk
Country	🇩🇰 Denmark
City	Skanderborg, Central Jutland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.104.60.34

Whois 2.104.60.34

IP Abuse Reports for 2.104.60.34:

This IP address has been reported a total of 36 times from 26 distinct sources. 2.104.60.34 was first reported on September 17th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-09-18 05:14:01 (3 hours ago)	2 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
Anonymous	2026-09-17 23:21:03 (9 hours ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1	Hacking Web App Attack
🇵🇱 Budyn	2026-09-17 23:19:21 (9 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.online \| URI: /.env \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇪🇸 arturotrenard	2026-09-17 22:02:54 (10 hours ago)	WordPress attack blocked (wp-defender): exploit-probe: https://cryptovibe.news/.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-17 21:59:18 (10 hours ago)	Auto-ban: >3000 req/min op 2026-09-17	Web App Attack SSH Hacking
🇳🇱 mieg	2026-09-17 21:42:41 (10 hours ago)	Web vulnerability probing	Brute-Force Web App Attack
🇨🇭 zynex	2026-09-17 20:51:38 (11 hours ago)	URL Probing: /.env	Web App Attack
🇮🇹 CoreTech srl	2026-09-17 20:13:57 (12 hours ago)	cloudlinux2 fail2ban: 2026-09-17 22:09:22,373 fail2ban.actions [1818]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-17 22:09:22,373 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Unban 34.65.124.80cloudlinux2 fail2ban: 2026-09-17 22:11:48,566 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Ban 93.152.209.9cloudlinux2 fail2ban: 2026-09-17 22:11:48,053 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 93.152.209.9 - 2026-09-17 22:11:48cloudlinux2 fail2ban: 2026-09-17 22:11:48,064 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 93.152.209.9 - 2026-09-17 22:11:48cloudlinux2 fail2ban: 2026-09-17 22:11:48,568 fail2ban.filter [1818]: INFO [recidive] Found 93.152.209.9 - 2026-09-17 22:11:48cloudlinux2 fail2ban: 2026-09-17 22:11:48,020 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 93.152.209.9 - 2026-09-17 22:11:48cloudlinux2 fail2ban: 2026-09-17 22:12:07,070 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 2.104.60.34 - 2026-09-17 22:12:07cloudlinux2 fail2ban: 2026-09-17 22:12:21,641 fail2ban.fil show less	Brute-Force
🇳🇿 Tripwire	2026-09-17 19:20:23 (13 hours ago)	Scanning for exploits - /.env	Web App Attack
🇭🇷 bubausluge	2026-09-17 19:06:15 (13 hours ago)	Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 6 attempts, Period: 2026-09-17 18:38: ... show more Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 6 attempts, Period: 2026-09-17 18:38:14 to 2026-09-17 18:38:14 show less	Web App Attack Bad Web Bot
🇨🇭 4server	2026-09-17 18:33:22 (13 hours ago)	[ThuSep1720:33:17.1552932026][security2:error][pid542621:tid542650][client2.104.60.34:0]ModSecurity: ... show more [ThuSep1720:33:17.1552932026][security2:error][pid542621:tid542650][client2.104.60.34:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"carolin-mizio.ch\"][uri\"/.env\"][unique_id\"aqwybcgFgPIvcTB-6syKFgAAABU\"] show less	Hacking Web App Attack
🇩🇪 Bedios GmbH	2026-09-17 18:09:28 (14 hours ago)	Login credentials theft attempt	Hacking
🇺🇸 mnsf	2026-09-17 17:05:17 (15 hours ago)	Abuse Detected (19)	Brute-Force Web App Attack
🇺🇸 SLSLLC	2026-09-17 16:48:37 (15 hours ago)	2.104.60.34 - - [17/Sep/2026:16:48:36 +0000] "GET /.env HTTP/2.0" 403 1928 "-" "Mozilla/5.0 (X11; Ub ... show more 2.104.60.34 - - [17/Sep/2026:16:48:36 +0000] "GET /.env HTTP/2.0" 403 1928 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 16:24:38 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 2.104.60.34 (2-104-60-34-cable.dk.customer.tdc. ... show more (mod_security) mod_security (id:210492) triggered by 2.104.60.34 (2-104-60-34-cable.dk.customer.tdc.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 12:24:32.245619 2026] [security2:error] [pid 13571:tid 13571] [client 2.104.60.34:49291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billswilliams.com"] [uri "/.env"] [unique_id "aqwUQAmyJPzpjplWBQPETwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.141.56.109

🇰🇷 210.123.87.158

🇧🇬 193.24.211.218

🇪🇸 193.19.207.91

🇮🇷 185.112.150.99

🇺🇸 162.216.149.199

🇺🇸 154.219.127.155

🇫🇷 88.160.132.32

🇺🇸 66.132.195.125

🇲🇦 196.217.174.26

🇭🇰 152.32.254.222

🇰🇷 119.202.55.237

🇨🇳 116.179.32.160

🇨🇳 115.190.249.177

🇰🇿 95.57.239.26

🇺🇸 64.62.197.7

🇨🇳 39.101.88.137

🇷🇺 37.28.177.141

🇺🇸 34.173.76.35

🇰🇷 8.220.209.206