JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.173

104.207.35.173 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.173

Whois 104.207.35.173

IP Abuse Reports for 104.207.35.173:

This IP address has been reported a total of 127 times from 17 distinct sources. 104.207.35.173 was first reported on June 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2026-05-02 12:35:52 (1 month ago)	Redishoneypot Honeypot hit, Action: KEYS bitcoin	IoT Targeted
🇺🇸 TPI-Abuse	2026-02-10 05:06:32 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:06:26.770980 2026] [security2:error] [pid 27801:tid 27801] [client 104.207.35.173:9283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idodat.com"] [uri "/site/.git/config"] [unique_id "aYq80grtv6Bvc9D2h0qHjwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:20:24 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:20:17.570058 2026] [security2:error] [pid 1194:tid 1194] [client 104.207.35.173:27017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kipdollar.com"] [uri "/dev/.git/config"] [unique_id "aYqj8cy6DQfpXIILioXiTwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:05:54 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:05:49.047313 2026] [security2:error] [pid 1637456:tid 1637456] [client 104.207.35.173:63811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentuckyminiaturehorsebreeders.org"] [uri "/dev/.git/config"] [unique_id "aYp2XV0VQg9wJA6z-9c8dQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 02:08:41 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 fbarela	2025-11-07 20:01:05 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇦🇺 MAGIC	2025-11-01 01:34:41 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-10-14 06:38:05 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-13 15:16:57 (7 months ago)	GlobalProtect login attempts with user waq.	VPN IP Brute-Force
Anonymous	2025-10-07 10:55:09 (7 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 13:32:50 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 04:58:43 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.04 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 london2038.com	2025-10-04 03:41:49 (8 months ago)	Connection atttempts against closed TCP ports Oct 4 05:41:43 BLOCK SRC=104.207.35.173 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Oct 4 05:41:43 BLOCK SRC=104.207.35.173 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=27905 DF PROTO=TCP SPT=31079 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 4 05:41:44 BLOCK SRC=104.207.35.173 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=27906 DF PROTO=TCP SPT=31079 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 4 05:41:45 BLOCK SRC=104.207.35.173 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=27907 DF PROTO=TCP SPT=31079 DPT=22 WINDOW=64240 RES=0x00 SYN show less	Port Scan
🇺🇸 hostseries	2025-09-28 03:43:40 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-09-27 19:59:14 (8 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.27 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.09.27 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 127 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.46.62.99

🇪🇨 186.47.8.14

🇧🇷 179.176.210.17

🇮🇩 163.7.8.79

🇯🇵 107.155.15.8

🇨🇦 85.217.149.13

🇫🇮 65.109.87.206

🇸🇬 47.237.108.40

🇧🇷 45.166.4.245

🇺🇸 2600:1f18:5b75:b802:b2a5:a347:78b3:f01f

🇨🇳 223.199.166.65

🇪🇸 196.196.150.6

🇲🇽 189.177.200.177

🇺🇸 143.198.171.91

🇺🇸 134.122.16.18

🇮🇩 116.193.191.104

🇻🇳 116.110.3.83

🇱🇹 81.30.98.158

🇺🇸 66.132.172.38

🇺🇸 45.56.79.53