JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.148

104.207.35.148 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 39%: ?

39%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.148

Whois 104.207.35.148

IP Abuse Reports for 104.207.35.148:

This IP address has been reported a total of 151 times from 25 distinct sources. 104.207.35.148 was first reported on June 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 /dev/null	2026-09-11 21:57:46 (1 week ago)	Web attack \| malicious scanning detected.	Hacking Web App Attack
🇩🇪 findlab	2026-09-11 06:00:03 (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-11 00:24:10 (1 week ago)	block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56	Bad Web Bot
🇫🇷 Sklurk	2026-09-10 00:44:50 (1 week ago)	Web App Attack	Web App Attack
🇳🇱 MM-bot	2026-09-09 11:32:48 (1 week ago)	URL-probe: HTTP/1.1 GET request on /wp-login.php (2026-09-09 13:32:48 UTC+2)	Web App Attack Hacking
🇺🇸 etu brutus	2026-09-08 01:15:34 (1 week ago)	104.207.35.148 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-08-09 11:54:04 (1 month ago)	Wordfence waf block on uvfousor WPIDD	Web App Attack
🇮🇹 VHosting	2026-07-14 03:10:03 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 05:13:54 (2 months ago)	Web App Attack	Web App Attack
Anonymous	2026-04-12 05:59:53 (5 months ago)	Attempt to scan vulnerabilities	Hacking
🇵🇱 sefinek.net	2025-12-31 07:21:53 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 10:02:04 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:01:58.876401 2025] [security2:error] [pid 29285:tid 29285] [client 104.207.35.148:36221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.versahealthcare.com"] [uri "/.git/HEAD"] [unique_id "aSbQFrkqYCFL0Og3A5lfeQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-26 09:05:08 (9 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-25 05:41:05 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:40:59.052387 2025] [security2:error] [pid 29896:tid 29896] [client 104.207.35.148:48579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.audio.hatfulofrain.com"] [uri "/.svn/wc.db"] [unique_id "aSVBawhRpgO8604LIdtW_wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 05:18:53 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:18:47.992687 2025] [security2:error] [pid 14223:tid 14239] [client 104.207.35.148:18825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.psychclinicforchange.com"] [uri "/.env"] [unique_id "aSU8N4jUYazU71qMBH9I7gAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 193.33.189.37

🇺🇸 152.32.205.153

🇫🇷 207.180.253.181

🇮🇩 202.158.19.179

🇻🇪 190.202.87.179

🇳🇱 185.223.235.60

🇫🇷 138.199.16.131

🇰🇷 121.137.29.114

🇷🇺 83.242.247.50

🇺🇸 48.214.144.135

🇺🇸 47.251.118.34

🇿🇦 41.24.169.142

🇺🇸 34.208.194.230

🇵🇭 2001:4455:648:7200:6c48:8872:644d:c503

🇨🇴 190.29.27.34

🇧🇷 186.208.81.252

🇩🇪 178.105.31.42

🇸🇪 171.25.158.58

🇧🇷 168.75.103.97

🇨🇳 113.117.46.83