JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.253

104.207.35.253 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.253

Whois 104.207.35.253

IP Abuse Reports for 104.207.35.253:

This IP address has been reported a total of 130 times from 21 distinct sources. 104.207.35.253 was first reported on June 12th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 securejdprop	2026-05-04 12:26:05 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇺🇸 www.winos.me	2026-02-02 10:24:25 (4 months ago)	Banned due to high error rate on HTTP/1.1 protocol	Brute-Force Web App Attack
Anonymous	2025-12-28 16:24:18 (5 months ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 16:14:20 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 11:14:02.550849 2025] [security2:error] [pid 17160:tid 17160] [client 104.207.35.253:43375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lazymanvegan.com"] [uri "/.svn/wc.db"] [unique_id "aVFXSsdew_goODlqBt9VyQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 16:55:37 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-27 21:02:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:02:08.451697 2025] [security2:error] [pid 21881:tid 21881] [client 104.207.35.253:33163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "difusionens.org"] [uri "/.svn/wc.db"] [unique_id "aSi8UOmxh_qXYIxjJ1DmowAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 oncord	2025-11-14 02:50:37 (6 months ago)	Form spam	Web Spam
🇩🇪 london2038.com	2025-10-27 09:55:03 (7 months ago)	Connection atttempts against closed TCP ports Oct 27 10:55:00 BLOCK SRC=104.207.35.253 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Oct 27 10:55:00 BLOCK SRC=104.207.35.253 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=49277 DF PROTO=TCP SPT=35147 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 27 10:55:01 BLOCK SRC=104.207.35.253 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=49278 DF PROTO=TCP SPT=35147 DPT=22 WINDOW=64240 RES=0x00 SYN Oct 27 10:55:02 BLOCK SRC=104.207.35.253 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=49279 DF PROTO=TCP SPT=35147 DPT=22 WINDOW=64240 RES=0x00 SYN show less	Port Scan
🇦🇺 oncord	2025-10-18 21:16:33 (7 months ago)	Form spam	Web Spam
Anonymous	2025-10-15 13:59:06 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-15 13:34:05 (7 months ago)	GlobalProtect login attempts with user bodyshop.	VPN IP Brute-Force
Anonymous	2025-10-08 12:37:26 (7 months ago)	Attempted brute force login to web vpn 29 time(s); last attempt for 2025.10.08 is noted in report ti ... show more Attempted brute force login to web vpn 29 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 12:22:31 (7 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 17:09:01 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-02 22:12:04 (8 months ago)	Attempted brute force login to web vpn 81 time(s); last attempt for 2025.10.02 is noted in report ti ... show more Attempted brute force login to web vpn 81 time(s); last attempt for 2025.10.02 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.48.154

🇻🇳 27.79.45.129

🇺🇸 20.169.105.85

🇰🇷 222.239.251.12

🇬🇧 198.178.235.41

🇹🇳 197.5.145.150

🇺🇦 185.237.106.201

🇮🇳 182.95.48.122

🇺🇸 162.216.149.53

🇺🇸 107.175.75.137

🇺🇸 104.243.37.202

🇰🇷 59.21.37.60

🇳🇱 45.153.34.195

🇳🇱 45.148.10.151

🇸🇬 119.28.101.155

🇮🇩 43.129.44.66

🇮🇳 27.123.94.10

🇮🇳 182.95.223.90

🇮🇳 103.226.90.137

🇷🇴 92.118.39.236