JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.108

104.207.33.108 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.108

Whois 104.207.33.108

IP Abuse Reports for 104.207.33.108:

This IP address has been reported a total of 139 times from 18 distinct sources. 104.207.33.108 was first reported on June 11th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-03-08 12:44:48 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-03-01 13:23:36 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-21 08:30:10 (3 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-07 16:18:27 (4 months ago)	Form spam	Web Spam
🇦🇺 oncord	2026-02-05 08:21:13 (4 months ago)	Form spam	Web Spam
🇩🇪 F242	2026-01-30 06:05:35 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇫🇷 tilellit.pro	2026-01-20 01:56:56 (4 months ago)	Fail2Ban banned 104.207.33.108 for security violations in jail wp-armour. Log: 2026/01/20 01:56:56 [ ... show more Fail2Ban banned 104.207.33.108 for security violations in jail wp-armour. Log: 2026/01/20 01:56:56 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.33.108 \| Target: wplogin" , client: 104.207.33.108, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇦🇺 MAGIC	2026-01-19 02:07:36 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 LRob.fr	2026-01-13 04:45:03 (5 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-29 09:07:19 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.108 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:07:11.354024 2025] [security2:error] [pid 30130:tid 30241] [client 104.207.33.108:29963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrewbelschner.com"] [uri "/.svn/wc.db"] [unique_id "aVJEv4m8NgNwXyBf3DzHQAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 11:24:09 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇦🇺 MAGIC	2025-12-20 01:01:05 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-27 14:37:18 (6 months ago)	Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.27 is noted in report ti ... show more Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.27 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:27:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.108 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:26:57.708578 2025] [security2:error] [pid 31084:tid 31084] [client 104.207.33.108:38981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.portelizabeth.jbaycabs.com"] [uri "/.env"] [unique_id "aSQW0deXN7HDXz7nXQo8rAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:07:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.108 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:06:57.567200 2025] [security2:error] [pid 22779:tid 22779] [client 104.207.33.108:42433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fruitinthedesert.com"] [uri "/.env"] [unique_id "aSQEEdnNPs3GTpH305EZ1wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇺🇸 104.28.152.173

🇵🇰 103.103.42.173

🇳🇱 91.92.40.217

🇱🇹 81.30.98.142

🇧🇷 45.234.103.104

🇺🇸 205.210.31.108

🇺🇸 198.98.56.205

🇬🇧 195.96.139.223

🇵🇰 116.71.136.125

🇺🇸 107.170.65.169

🇺🇸 92.204.138.191

🇺🇸 47.141.137.117

🇺🇸 2607:f8b0:4004:1002::127

🇫🇷 172.71.232.84

🇭🇰 152.32.134.156

🇫🇷 91.231.89.250

🇬🇧 35.203.211.111

🇬🇧 35.203.210.222

🇺🇸 216.25.89.142