JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.27

104.207.35.27 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.27

Whois 104.207.35.27

IP Abuse Reports for 104.207.35.27:

This IP address has been reported a total of 148 times from 21 distinct sources. 104.207.35.27 was first reported on June 11th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-22 11:39:25 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-01 23:04:52 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.27 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.27 2026-05-01 07:15:31 /base/post.php,{"body":"act=appcode","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/x-shockwave-flash, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, /"],"Accept-Encoding":["identity"],"Accept-Language":["zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3"],"Content-Length":["11"],"Content-Type":["application/x-www-form-urlencoded"],"Dnt":["1"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Chrome/23.0.1271.64 Safari/537.11"]},"host":"39.129.113.77:8444","method":"POST","proto":"HTTP/1.1","remote_addr":"104.207.35.27:23835","status_code":200,"url":"/base/post.php","user_agent":"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Chrome/23.0.1271.64 Safari/537.11"} show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-26 22:51:34 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.27 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.27 2026-04-26 22:19:12 /druid/index.html show less	Web App Attack
🇱🇻 garmtech.com	2026-04-26 06:44:05 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-44.104.207.35.27.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-44.104.207.35.27.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-04-25 04:06:56 (1 month ago)	Forum/form spam	Web Spam
🇨🇳 ThreatBook.io	2026-04-16 22:45:12 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.27 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.35.27 2026-04-16 19:20:22 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-04-16 18:17:30 /druid/index.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-12 22:50:19 (1 month ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.35.2 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.35.27 2026-04-12 02:42:06 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 22:46:05 (1 month ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.35.2 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.35.27 2026-04-11 02:18:50 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2026-03-23 04:57:57 (2 months ago)	Forum/form spam	Web Spam
🇨🇳 ThreatBook.io	2026-03-11 23:01:06 (2 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.35.27 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.35.27 2026-03-11 13:17:46 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇮🇹 VHosting	2026-02-18 22:16:47 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-02-08 13:32:41 (3 months ago)	Forum/form spam	Web Spam
🇨🇳 ThreatBook.io	2026-01-18 23:39:02 (4 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.35.27 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.35.27 2026-01-18 04:04:12 /?redirect:${%23req%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23s%3dnew%20java.util.Scanner((new%20java.lang.ProcessBuilder(%27netstat%20-an%27.toString().split(%27\\s%27))).start().getInputStream()).useDelimiter(%27\\AAAA%27),%23str%3d%23s.hasNext()?%23s.next():%27%27,%23resp%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23resp.setCharacterEncoding(%27UTF-8%27),%23resp.getWriter().println(%23str),%23resp.getWriter().flush(),%23resp.getWriter().close()} show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-27 22:51:44 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.35.27 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.35.27 2025-12-27 11:40:57 /cpanelwebcall/%3C0629107178%3E 2025-12-27 11:40:39 /%0a.example.com 2025-12-27 11:48:03 /Login_files//..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5Cboot.ini 2025-12-27 11:49:47 /images/My97DatePicker/../../../../../../../../windows/win.ini%00.jpg 2025-12-27 11:48:44 /images/My97DatePicker/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255cboot.ini show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:31:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.27 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:31:50.176786 2025] [security2:error] [pid 15794:tid 15794] [client 104.207.35.27:29171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.icaruscreativearts.com"] [uri "/.git/HEAD"] [unique_id "aSQmBkrGR9PYlF2Mlw_LxQAAACY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.217

🇧🇼 168.167.228.74

🇧🇾 86.57.173.115

🇬🇧 35.203.211.142

🇹🇭 223.205.241.182

🇨🇳 219.155.208.82

🇮🇳 202.164.134.245

🇨🇴 190.108.77.124

🇵🇾 181.232.189.126

🇨🇳 106.44.225.163

🇷🇴 92.118.39.204

🇷🇴 193.32.162.13

🇨🇳 117.82.255.116

🇨🇳 115.190.143.11

🇺🇸 103.143.231.24

🇨🇳 14.103.114.90

🇺🇸 172.234.218.245

🇱🇹 81.30.98.49

🇷🇺 195.239.47.189

🇺🇸 156.239.253.250