JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

60.213.204.212

Neutral Activity

Abuse confidence score ?

0% Low Risk

85 reports

48 reporters · latest 9 months ago

ISP	China Unicom Shandong province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Jinan, Shandong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

60.213.204.212 has been reported 85 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 60.213.204.212

This IP address has been reported a total of 85 times from 48 distinct sources. 60.213.204.212 was first reported on August 6th 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Altis Shield	2025-12-01 09:34:46 (9 months ago)	Possible port scan detected from 60.213.204.212 (masscan/nmap signature)	Email Spam Port Scan
🇫🇷 Eldeberen	2025-09-05 11:10:36 (1 year ago)	HTTP GET on a non-existent endpoint (CMS, .env, aws.yml, ...)	Web App Attack
🇪🇸 masterguru	2025-08-24 20:36:37 (1 year ago)	BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (11 ... show more BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇺🇸 thefoofighter	2025-08-24 09:57:10 (1 year ago)	[Sun Aug 24 09:57:09.295065 2025] [:error] [pid 1436165] [client 60.213.204.212:4905] [client 60.213 ... show more [Sun Aug 24 09:57:09.295065 2025] [:error] [pid 1436165] [client 60.213.204.212:4905] [client 60.213.204.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/index/ajax/lang"] [unique_id "aKrh9eAfrdt9SV56UWiilwAAAAg"] [Sun Aug 24 09:57:09.989929 2025] [:error] [pid 1434121] [client 60.213.204.212:4948] [client 60.213.204.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [severity "CRITICAL"] [ ... show less	Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2025-08-24 06:58:01 (1 year ago)	sae-16 : Block Shell attacks=>/index/ajax/lang?lang=../../application/database(/../..)	Hacking
🇫🇷 Sklurk	2025-08-24 06:02:27 (1 year ago)	Web App Attack	Web App Attack
🇫🇮 oh.mg	2025-08-24 00:52:55 (1 year ago)	[Sun Aug 24 02:52:54.704183 2025] [security2:error] [pid 3659053:tid 3659079] [client 60.213.204.212 ... show more [Sun Aug 24 02:52:54.704183 2025] [security2:error] [pid 3659053:tid 3659079] [client 60.213.204.212:37759] [client 60.213.204.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.oh.mg"] [uri "/index/ajax/lang"] [unique_id "aKpiZm5j9yJxE_L06FSplwAAABg"] ... show less	Bad Web Bot Web App Attack
Anonymous	2025-08-23 22:57:44 (1 year ago)	Intrusion Detect. SQL injection attempts with URL.	Hacking SQL Injection Web App Attack
🇫🇮 oh.mg	2025-08-23 22:15:07 (1 year ago)	[Sun Aug 24 00:15:05.724870 2025] [security2:error] [pid 4023386:tid 4023399] [client 60.213.204.212 ... show more [Sun Aug 24 00:15:05.724870 2025] [security2:error] [pid 4023386:tid 4023399] [client 60.213.204.212:57221] [client 60.213.204.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.mmn.on.ca"] [uri "/index/ajax/lang"] [unique_id "aKo9aRfEu1mn-mEILDURjwAAAQs"] [Sun Aug 24 00:15:06.641017 2025] [security2:error] [pid 4023386:tid 4023405] [client 60.213.204.212:57273] [client 60.213.204.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4. ... show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2025-08-23 21:45:26 (1 year ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇫🇷 dynamix	2025-08-23 18:48:31 (1 year ago)	Multiple WAF Violations	Web App Attack
🇫🇷 COMAITE	2025-08-23 16:51:10 (1 year ago)	Common web attack from 60.213.204.212.	Web App Attack
🇪🇸 el-brujo	2025-08-23 11:49:41 (1 year ago)	23/Aug/2025:13:49:40.951177 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 23/Aug/2025:13:49:40.951177 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 60.213.204.212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\\\\\.\\\\\\\\./" at REQUEST_URI. [file "/etc/httpd/conf.d/mod_security.conf"] [line "86"] [id "500002"] [hostname "www.hostench.eu"] [uri "/index/ajax/lang"] [unique_id "aKmq1OxjmLzHthlY_52XEgAAgCI"] ... show less	Hacking Web App Attack
🇩🇪 conseilgouz	2025-08-23 04:09:37 (1 year ago)	ece-16 : Block Shell attacks=>/index/ajax/lang?lang=../../application/database(/../..)	Hacking
🇬🇧 CrystalMaker	2025-08-23 01:06:20 (1 year ago)	Vulnerability scan - GET /index/ajax/lang?lang=../../application/database; GET /index/ajax/lang?lang ... show more Vulnerability scan - GET /index/ajax/lang?lang=../../application/database; GET /index/ajax/lang?lang=../../application/database show less	Hacking

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.149.188

🇺🇸 170.106.165.186

🇺🇸 134.122.12.237

🇿🇦 105.28.108.165

🇫🇷 85.204.70.118

🇺🇸 68.225.58.58

🇫🇷 5.196.33.230

🇰🇷 222.110.147.56

🇺🇸 198.44.57.182

🇲🇽 187.169.179.186

🇸🇦 176.44.61.73

🇩🇪 158.94.208.232

🇺🇸 152.39.174.231

🇵🇰 118.107.139.224

🇺🇦 94.131.213.253

🇺🇸 52.248.41.39

🇻🇳 45.119.212.99

🇬🇭 41.242.115.84

🇺🇸 35.172.213.213

🇸🇬 34.142.211.32