JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.170

104.207.35.170 was found in our database!

This IP was reported 158 times. Confidence of Abuse is 26%: ?

26%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.170

Whois 104.207.35.170

IP Abuse Reports for 104.207.35.170:

This IP address has been reported a total of 158 times from 30 distinct sources. 104.207.35.170 was first reported on June 6th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-08-26 23:02:52 (1 day ago)	Web application attack detected	Hacking Web App Attack
🇩🇪 Goetz	2026-08-25 14:29:14 (2 days ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇫🇷 Sklurk	2026-08-03 01:00:06 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-08 13:45:44 (1 month ago)	[ns31.kdns.gr] httpd-login-spray-site: sites=www.savouras.gr; logs=/var/log/httpd/domains/savouras.g ... show more [ns31.kdns.gr] httpd-login-spray-site: sites=www.savouras.gr; logs=/var/log/httpd/domains/savouras.gr.log; samples=site_wide=true \| distinct_ips=14 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-07-06 10:10:04 (1 month ago)	Wordfence waf block on registrymatters	Web App Attack
🇫🇷 ELYAZ	2026-07-04 08:34:29 (1 month ago)	(y4) Failed scan -byebye- from 104.207.35.170 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-07-03 01:42:48 (1 month ago)	(y4) Failed scan -byebye- from 104.207.35.170 (US/United States/-): (CF_ENABLE)	Hacking
🇪🇸 librebit	2026-05-17 07:19:15 (3 months ago)	Brute force	Brute-Force
🇬🇧 AvonleaConsulting	2026-04-30 23:07:12 (3 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-03-20 14:29:04 (5 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇱🇻 garmtech.com	2026-02-13 00:25:00 (6 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-01-21 20:21:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 15:21:49.143555 2026] [security2:error] [pid 8449:tid 8449] [client 104.207.35.170:45381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodgersboosterclub.com"] [uri "/.git/HEAD"] [unique_id "aXE1XdNhw0f_VgLpaQ32CwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-21 13:29:10 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 08:29:04.232795 2026] [security2:error] [pid 3302205:tid 3302205] [client 104.207.35.170:46861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realestatemedia.co.uk"] [uri "/.git/HEAD"] [unique_id "aXDUoGIXbWiwlYmiPCb7pwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-01-21 08:11:54 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.svn/wc.db UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-20 20:21:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.170 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 15:21:35.498549 2026] [security2:error] [pid 17451:tid 17451] [client 104.207.35.170:36627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tek-front.com"] [uri "/.git/HEAD"] [unique_id "aW_jzyrznHBRCKJGnTE6BQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 158 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.94.240.80

🇰🇷 210.204.63.182

🇧🇷 205.210.31.207

🇺🇸 198.134.107.73

🇷🇺 194.28.194.205

🇷🇺 176.109.249.68

🇺🇸 34.96.36.103

🇮🇪 20.105.65.67

🇺🇸 3.130.168.2

🇩🇪 213.209.159.210

🇩🇪 193.124.20.252

🇺🇸 162.216.149.231

🇩🇪 154.194.4.206

🇯🇵 136.110.91.100

🇰🇷 112.164.234.246

🇩🇪 93.152.221.64

🇷🇴 89.40.222.20

🇬🇹 74.244.67.200

🇳🇱 68.183.6.221

🇳🇱 45.148.10.152