JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.73

104.207.35.73 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.73

Whois 104.207.35.73

IP Abuse Reports for 104.207.35.73:

This IP address has been reported a total of 143 times from 18 distinct sources. 104.207.35.73 was first reported on June 4th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-22 12:09:47 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 07:09:40.122216 2026] [security2:error] [pid 742:tid 742] [client 104.207.35.73:54169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "development-dynamics.com"] [uri "/.git/config"] [unique_id "aZryBF-ikHgUQk1n9JW6bwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 05:43:29 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:43:19.689569 2026] [security2:error] [pid 4576:tid 4576] [client 104.207.35.73:57759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kulprid.com"] [uri "/config/.env"] [unique_id "aZai90WJrcvBmnW8DVVwDAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 04:30:21 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:30:12.771916 2026] [security2:error] [pid 27396:tid 27396] [client 104.207.35.73:26771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmp.net"] [uri "/.git/config"] [unique_id "aZaR1NEkCOjs-aIgj-GO2wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:13:15 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:13:08.096257 2026] [security2:error] [pid 9020:tid 9056] [client 104.207.35.73:53629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/.env.production"] [unique_id "aZZ_xOtakGI2nF--R9n4VwAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:12:52 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:12:48.936775 2026] [security2:error] [pid 25539:tid 25539] [client 104.207.35.73:52907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vittariahealth.com"] [uri "/.git/config"] [unique_id "aZZVgBI1B-c_WtXfYTg52wAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-02-18 22:39:34 (3 months ago)	web exploits	Hacking Exploited Host Web App Attack
🇩🇪 gadix	2026-02-18 18:44:45 (3 months ago)	[18/Feb/2026:19:44:44.753637 +0100] aZYInLcZbWE32R-PyZ1l0wAAAAU 104.207.35.73 37868 127.0.0.1 7081 [ ... show more [18/Feb/2026:19:44:44.753637 +0100] aZYInLcZbWE32R-PyZ1l0wAAAAU 104.207.35.73 37868 127.0.0.1 7081 [18/Feb/2026:19:44:44.951104 +0100] aZYInGo81UAgvi4AwartugAAAAc 104.207.35.73 37880 127.0.0.1 7081 [18/Feb/2026:19:44:45.148553 +0100] aZYInf-gMKuihklgiSOAVgAAAAQ 104.207.35.73 54104 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:37:22 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:37:14.364162 2026] [security2:error] [pid 18898:tid 18898] [client 104.207.35.73:18021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theyoungstrategist.com"] [uri "/.env.save"] [unique_id "aZYG2lacwaDviOIMAh_8JQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-18 16:41:01 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇭 Origon	2026-02-18 13:44:36 (3 months ago)	http-sensitive-files - IP: 104.207.35.73 - time="2026-02-18T14:44:36+01:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 104.207.35.73 - time="2026-02-18T14:44:36+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.35.73 (US/200373) : 4h ban on Ip 104.207.35.73" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:13:41 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:13:35.074521 2026] [security2:error] [pid 27622:tid 27622] [client 104.207.35.73:13097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wcvfr.org"] [uri "/config/.env"] [unique_id "aZWs7x1lqv1zq_YOocxONwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-10 20:09:10 (5 months ago)	botnet	DDoS Attack
Anonymous	2025-11-01 13:30:47 (7 months ago)	Attempted brute force login to web vpn 13 time(s); last attempt for 2025.11.01 is noted in report ti ... show more Attempted brute force login to web vpn 13 time(s); last attempt for 2025.11.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-26 18:57:30 (7 months ago)	Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.26 is noted in report ti ... show more Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-23 01:24:51 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.23 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.23 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 192.36.109.82

🇺🇸 172.203.234.251

🇺🇸 161.123.218.106

🇳🇬 152.32.140.39

🇨🇳 115.190.83.184

🇮🇩 103.171.85.192

🇸🇪 46.59.90.49

🇭🇰 45.10.175.77

🇵🇱 213.92.220.103

🇺🇸 206.162.244.24

🇦🇪 198.38.94.14

🇸🇪 192.36.109.125

🇸🇪 192.36.109.118

🇸🇬 178.128.84.81

🇫🇮 178.20.210.151

🇵🇪 161.132.37.31

🇺🇸 71.6.237.246

🇮🇳 61.95.199.54

🇸🇪 192.36.109.116

🇭🇰 150.5.169.138