JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.115

104.207.35.115 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.115

Whois 104.207.35.115

IP Abuse Reports for 104.207.35.115:

This IP address has been reported a total of 155 times from 23 distinct sources. 104.207.35.115 was first reported on June 12th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-08-31 04:33:32 (1 day ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-08-30 09:02:12 (2 days ago)	Bad_requests	Bad Web Bot
🇫🇮 paissangroup	2026-08-26 06:28:15 (6 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 fbarela	2026-08-24 04:00:17 (1 week ago)	FortiGate SSL VPN login failures.	Brute-Force Hacking
Anonymous	2026-06-17 07:20:19 (2 months ago)	Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.	Web App Attack
🇩🇪 LRob	2026-06-12 02:30:24 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-11 15:56:56 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 4server	2026-04-21 05:32:41 (4 months ago)	[TueApr2107:32:39.1315332026][security2:error][pid2446016:tid2446042][client104.207.35.115:0]ModSecu ... show more [TueApr2107:32:39.1315332026][security2:error][pid2446016:tid2446042][client104.207.35.115:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"casacarmen.ch\"][uri\"/db.sql\"][unique_id\"aecL9wWD-hB32GSVd3CW8gAAANc\"] show less	Port Scan Brute-Force Web App Attack
🇪🇸 librebit	2026-04-20 15:47:12 (4 months ago)	Brute force	Brute-Force
🇩🇪 HERA - Operations	2026-04-20 15:35:00 (4 months ago)	bau-arge - searching for vulnerable scripts: database.sql 2026/04/20 17:35:00	Web App Attack
🇺🇸 TPI-Abuse	2026-03-02 21:54:03 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.115 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 16:53:45.067619 2026] [security2:error] [pid 31996:tid 31996] [client 104.207.35.115:47165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.landtug.modeltdr.com"] [uri "/.svn/wc.db"] [unique_id "aaYG6Qe5gh4_-fkigReilgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-28 21:51:51 (6 months ago)	"GET /.aws/credentials HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-25 04:27:18 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.35.115 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.207.35.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 23:27:15.690048 2025] [security2:error] [pid 22967:tid 22967] [client 104.207.35.115:16675] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.phantomkennels.com\|F\|2"] [data "[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.phantomkennels.com"] [uri "/[email protected]"] [unique_id "aUy9IxJGxDfmKqH6iURswAAAAAI"], referer: https://www.phantomkennels.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-26 19:50:06 (9 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:28:00 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.115 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:27:53.695028 2025] [security2:error] [pid 19176:tid 19176] [client 104.207.35.115:44145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.theprairiejewel.com"] [uri "/.git/HEAD"] [unique_id "aSVMaVsCgrEYpUyy9hWHKAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a02:8434:b140:1601:e41a:840c:21e2:e2b4

🇮🇩 103.59.160.242

🇧🇩 103.49.203.95

🇺🇸 64.62.156.46

🇱🇻 62.60.130.242

🇺🇦 46.150.74.36

🇲🇦 41.249.25.236

🇺🇸 35.235.124.176

🇨🇲 2605:59c0:1e64:3f08:9438:6d6e:33e6:e3ef

🇹🇼 198.235.24.126

🇳🇱 193.47.62.69

🇧🇬 185.134.230.104

🇮🇳 182.95.106.118

🇺🇸 173.237.184.13

🇭🇰 165.154.41.232

🇺🇸 162.216.150.217

🇺🇸 146.190.127.71

🇨🇳 116.147.155.124

🇩🇪 104.28.197.14

🇺🇸 65.49.1.149