JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.227

104.207.35.227 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.227

Whois 104.207.35.227

IP Abuse Reports for 104.207.35.227:

This IP address has been reported a total of 147 times from 20 distinct sources. 104.207.35.227 was first reported on June 5th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-02-09 22:59:49 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-09	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-09 21:19:41 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:19:34.990780 2026] [security2:error] [pid 18769:tid 18769] [client 104.207.35.227:32597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garantaconsulting.com"] [uri "/api/.env"] [unique_id "aYpPZpfSxhrfcAYt2hJ3gAAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 20:10:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:10:02.681019 2026] [security2:error] [pid 14294:tid 14294] [client 104.207.35.227:61675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galeriedorion.com"] [uri "/.env"] [unique_id "aYo_GsDN4PFupPJc8ftbhQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 09:39:51 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 04:39:46.792576 2026] [security2:error] [pid 27782:tid 27782] [client 104.207.35.227:40453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullyevil.com"] [uri "/new/.git/config"] [unique_id "aYmrYvs3xCTQ0KKN4kkIrgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 eacontent	2026-01-18 13:04:00 (4 months ago)	104.207.35.227 - - [13/Jan/2026:04:42:02 -0500] "GET /.env HTTP/1.1" 404 34 "-" "Mozilla/5.0 (Macint ... show more 104.207.35.227 - - [13/Jan/2026:04:42:02 -0500] "GET /.env HTTP/1.1" 404 34 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-14 11:15:40 (5 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-12 12:48:07 (5 months ago)	WP Login Scan Activities	Web App Attack
🇧🇪 voormedia	2025-12-05 09:21:36 (6 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇺🇸 [email protected]	2025-12-01 00:07:33 (6 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-12-01T00:07:33Z	Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2025-11-29 10:08:20 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-11-25 03:13:40 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-11-17 14:04:27 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-11-02 19:27:08 (7 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 Psycho Solutions LLC	2025-10-28 19:39:00 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 10/28/2025 7:39 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-23 11:15:32 (7 months ago)	WP Login Scan Activities	Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.20

🇺🇸 193.36.225.104

🇵🇱 138.124.20.112

🇺🇸 91.230.168.210

🇩🇰 86.52.116.15

🇬🇧 35.203.210.56

🇺🇸 8.228.242.151

🇺🇸 3.19.120.155

🇮🇳 192.178.65.81

🇫🇮 147.185.133.133

🇺🇸 144.202.82.88

🇺🇸 143.198.134.9

🇻🇳 103.142.27.139

🇬🇧 82.19.12.103

🇷🇴 80.94.92.186

🇳🇱 77.83.39.197

🇺🇸 66.132.172.226

🇳🇱 45.148.10.151

🇨🇭 45.59.124.156

🇺🇸 40.77.167.255