JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.142

104.207.35.142 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.142

Whois 104.207.35.142

IP Abuse Reports for 104.207.35.142:

This IP address has been reported a total of 147 times from 22 distinct sources. 104.207.35.142 was first reported on June 4th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-05-21 19:58:15 (3 weeks ago)	(wordpress) Failed wordpress login from 104.207.35.142 (US/United States/Virginia/Ashburn/-/[redacte ... show more (wordpress) Failed wordpress login from 104.207.35.142 (US/United States/Virginia/Ashburn/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇨🇳 ThreatBook.io	2026-05-15 23:44:05 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.142 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.142 2026-05-15 16:23:55 / 2026-05-15 16:55:19 / 2026-05-15 16:55:21 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-27 00:34:17 (6 months ago)	ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.35.14 ... show more ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.35.142 2025-11-26 19:35:55 /.svn/wc.db show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:10:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:10:42.065880 2025] [security2:error] [pid 9607:tid 9683] [client 104.207.35.142:48573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.upperwilds.com"] [uri "/.svn/wc.db"] [unique_id "aSan8vkDcg6wFbLmNJ0b9gAAAgs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:31:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:31:37.860933 2025] [security2:error] [pid 11120:tid 11120] [client 104.207.35.142:33957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.dwiller.com"] [uri "/.svn/wc.db"] [unique_id "aSaeyVqHOVh1ieoa8absnwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:03:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:03:34.547880 2025] [security2:error] [pid 17888:tid 17888] [client 104.207.35.142:41233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.markshvarts.com"] [uri "/.git/HEAD"] [unique_id "aSQRVuKL_yz9_CFt87pJoAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:01:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:01:12.585522 2025] [security2:error] [pid 22894:tid 22894] [client 104.207.35.142:19235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jbernsteinpc.com"] [uri "/.env"] [unique_id "aSP0qEFwu8qvzQw12SDLngAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:06:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:06:02.949488 2025] [security2:error] [pid 6543:tid 6543] [client 104.207.35.142:15339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.walkenfeld.com"] [uri "/.svn/wc.db"] [unique_id "aSPnurBjOGpSMUkVGQd-XgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 00:36:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:16:20.383236 2025] [security2:error] [pid 21018:tid 21018] [client 104.207.35.142:46229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vbn.banis-associates.com"] [uri "/.svn/wc.db"] [unique_id "aSOj1MmHzjBXfeeUqWFkbQAAAHw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-23 08:20:02 (6 months ago)	\| SQL injection attempt.	Hacking SQL Injection Web App Attack
🇫🇷 LRob.fr	2025-11-21 18:15:05 (6 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2025-11-13 23:44:44 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-19 18:45:32 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 04:14:57 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-15 22:32:23 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.202.112.84

🇯🇵 210.130.137.9

🇬🇧 188.240.59.27

🇧🇷 187.58.241.90

🇺🇸 138.197.204.198

🇨🇳 123.96.11.226

🇹🇼 111.70.32.52

🇨🇳 106.75.239.166

🇱🇹 81.30.98.142

🇩🇪 69.5.169.49

🇨🇦 20.151.2.122

🇨🇳 220.205.123.19

🇩🇪 213.209.159.235

🇻🇳 163.61.182.82

🇵🇰 122.50.1.115

🇨🇳 118.81.197.74

🇭🇰 101.32.1.25

🇫🇷 92.103.134.183

🇺🇸 65.49.1.194

🇳🇱 45.148.10.147