JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.35.78

104.207.35.78 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.35.78

Whois 104.207.35.78

IP Abuse Reports for 104.207.35.78:

This IP address has been reported a total of 126 times from 16 distinct sources. 104.207.35.78 was first reported on June 11th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-10 20:05:56 (4 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-10 18:59:48 (4 days ago)	104.207.35.78 - - [10/Jun/2026:21:52:35 +0300] "GET http://visnyk.ukrbook.net/.env HTTP/1.1" 404 766 ... show more 104.207.35.78 - - [10/Jun/2026:21:52:35 +0300] "GET http://visnyk.ukrbook.net/.env HTTP/1.1" 404 766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 104.207.35.78 - - [10/Jun/2026:21:59:48 +0300] "GET http://hudkult.mari.kyiv.ua/.env HTTP/1.1" 404 768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-23 13:11:47 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 08:11:42.414289 2026] [security2:error] [pid 11508:tid 11534] [client 104.207.35.78:58059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frontier-sales.com.exede-sales.com"] [uri "/.git/config"] [unique_id "aZxSDp_6B2PEzRRyIh5h0wAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:18:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.35.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.35.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:18:05.082397 2025] [security2:error] [pid 20308:tid 20308] [client 104.207.35.78:44353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorbalog.com"] [uri "/.svn/wc.db"] [unique_id "aSUt_Q2ytP27Q4QDOmPCYgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 13:32:32 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇩🇪 LRob.fr	2025-10-18 00:34:32 (7 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2025-10-17 12:48:23 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-16 19:00:24 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force
🇧🇪 cmbplf	2025-10-15 02:25:52 (8 months ago)	2.356 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2025-10-06 18:33:29 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.06 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-27 17:17:36 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.09.27 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.09.27 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-26 20:34:06 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.26 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.26 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.241.173.116

🇳🇱 204.76.203.51

🇦🇷 179.43.101.190

🇲🇴 125.31.4.70

🇨🇦 85.217.149.64

🇫🇮 62.60.152.192

🇹🇭 49.228.246.20

🇺🇸 49.51.188.155

🇷🇺 46.165.56.248

🇰🇷 43.164.190.238

🇵🇾 186.158.200.238

🇹🇷 185.39.204.145

🇮🇩 182.8.249.97

🇨🇳 117.50.130.228

🇦🇱 79.106.35.232

🇩🇪 47.91.94.185

🇳🇱 40.126.32.134

🇩🇪 34.185.204.195

🇨🇦 2607:f8b0:4023:1801::12c

🇵🇱 194.180.49.104