JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.235

104.207.35.235 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.235

Whois 104.207.35.235

IP Abuse Reports for 104.207.35.235:

This IP address has been reported a total of 148 times from 20 distinct sources. 104.207.35.235 was first reported on June 6th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-22 13:21:42 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-04-17 23:51:22 (1 month ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.35.235 2026-04-17 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.35.235 2026-04-17 07:34:02 /docs/appdev/sample/web/WEB-INF/web.xml show less	Web App Attack
🇦🇺 oncord	2026-04-12 11:58:49 (1 month ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2026-04-08 23:13:33 (2 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.35.235 2026-04-0 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.35.235 2026-04-08 19:20:31 /druid/index.html show less	Web App Attack
🇬🇧 spamverify.com	2026-03-20 14:08:05 (2 months ago)	Honeypot Hit: Contact Form	Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇺 oncord	2026-03-18 00:10:15 (2 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-14 23:09:59 (3 months ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2026-02-11 23:27:32 (4 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.35.235 2026-02-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.35.235 2026-02-11 11:35:00 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-02-11 11:34:59 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 oncord	2026-02-02 18:47:36 (4 months ago)	Form spam	Web Spam
🇺🇸 oncord	2026-01-22 08:21:54 (4 months ago)	Form spam	Web Spam
🇵🇱 nfsec.pl	2026-01-22 04:33:55 (4 months ago)	104.207.35.235 - - [22/Jan/2026:04:33:46 +0000] "GET /index.php?option=com_search&searchword=%20atak ... show more 104.207.35.235 - - [22/Jan/2026:04:33:46 +0000] "GET /index.php?option=com_search&searchword=%20atak&searchphrase=exact%22%29%20AS%20rkyd%20WHERE%208181%3D8181%20AND%20CHAR%28108%29%7C%7CCHAR%28102%29%7C%7CCHAR%2898%29%7C%7CCHAR%28101%29%3DREGEXP_SUBSTRING%28REPEAT%28LEFT%28CRYPT_KEY%28CHAR%2865%29%7C%7CCHAR%2869%29%7C%7CCHAR%2883%29%2CNULL%29%2C0%29%2C500000000%29%2CNULL%29--%20PycQ&ordering=newest HTTP/1.1" 403 5842 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 104.207.35.235 - - [22/Jan/2026:04:33:48 +0000] "GET /index.php?option=com_search&searchword=%20atak&searchphrase=exact%27%20IN%20BOOLEAN%20MODE%29%20AND%20CHAR%28108%29%7C%7CCHAR%28102%29%7C%7CCHAR%2898%29%7C%7CCHAR%28101%29%3DREGEXP_SUBSTRING%28REPEAT%28LEFT%28CRYPT_KEY%28CHAR%2865%29%7C%7CCHAR%2869%29%7C%7CCHAR%2883%29%2CNULL%29%2C0%29%2C500000000%29%2CNULL%29%23&ordering=newest HTTP/1.1" 403 5842 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.0) AppleWe ... show less	Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-01-20 00:58:03 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-58.104.207.35.235.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-58.104.207.35.235.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-10 00:51:06 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.35.23 ... show more ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.35.235 2026-01-09 07:55:31 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2025-12-31 13:03:49 (5 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.43.76.81

🇺🇸 165.154.36.105

🇫🇷 91.231.89.74

🇨🇳 45.254.49.245

🇷🇴 193.32.162.125

🇳🇱 176.65.139.248

🇺🇸 173.249.209.8

🇺🇸 165.154.172.37

🇺🇸 162.216.150.58

🇺🇸 162.216.149.55

🇫🇮 147.185.133.75

🇨🇳 119.96.174.235

🇻🇳 103.166.182.155

🇺🇸 66.132.172.183

🇬🇧 45.82.76.110

🇺🇸 45.3.35.131

🇺🇸 44.220.185.42

🇺🇸 165.154.172.200

🇺🇸 162.216.150.247

🇺🇸 162.216.150.149