JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.228

104.207.35.228 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.228

Whois 104.207.35.228

IP Abuse Reports for 104.207.35.228:

This IP address has been reported a total of 130 times from 17 distinct sources. 104.207.35.228 was first reported on June 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-24 09:42:10 (2 weeks ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-01-21 08:52:12 (4 months ago)	Forum/form spam	Web Spam
🇺🇸 myagent.site	2025-12-27 02:35:49 (5 months ago)	Blocking for trying to access an exploit file: /wordpress//kickstart.php	Hacking
Anonymous	2025-12-25 18:37:35 (5 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-12-22 14:20:51 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:58:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:58:46.242161 2025] [security2:error] [pid 27048:tid 27048] [client 104.207.35.228:18383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexissteinrauf.com"] [uri "/.svn/wc.db"] [unique_id "aSP0Fo9yNdHgdwZg3NMJqQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:12:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:12:46.680096 2025] [security2:error] [pid 13071:tid 13071] [client 104.207.35.228:15905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.computerian.net"] [uri "/.svn/wc.db"] [unique_id "aSPpTrQqh59jBv4p_4fSswAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 06:34:18 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-17 11:01:34 (7 months ago)	GlobalProtect login attempts with user rfasula.	VPN IP Brute-Force
Anonymous	2025-10-06 05:30:55 (8 months ago)	Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.06 is noted in report ti ... show more Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 10:33:13 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.05 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 14:14:51 (8 months ago)	Attempted brute force login to web vpn 82 time(s); last attempt for 2025.10.02 is noted in report ti ... show more Attempted brute force login to web vpn 82 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-29 11:12:48 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.09.29 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.09.29 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-26 21:36:09 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.26 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.26 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-04-07 06:58:12 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.169

🇰🇷 59.21.37.60

🇬🇧 37.10.113.212

🇰🇷 14.35.209.208

🇧🇪 213.211.137.51

🇵🇱 194.180.49.145

🇬🇧 185.247.137.108

🇨🇳 110.177.177.8

🇫🇷 85.217.140.42

🇺🇸 68.220.171.40

🇳🇱 45.153.34.114

🇳🇱 45.148.10.141

🇩🇪 116.203.204.171

🇩🇪 91.98.73.11

🇱🇹 81.30.98.142

🇬🇧 2a06:4880:6000::76

🇺🇸 2607:f8b0:4001:c17::126

🇨🇿 80.188.220.180

🇺🇸 20.65.193.61

🇮🇷 2.185.31.124