JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.114

104.207.33.114 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.114

Whois 104.207.33.114

IP Abuse Reports for 104.207.33.114:

This IP address has been reported a total of 136 times from 20 distinct sources. 104.207.33.114 was first reported on June 4th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-23 03:47:07 (2 days ago)	Web App Attack	Web App Attack
🇬🇧 PeravixGroup	2026-05-10 10:39:38 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-07 00:09:33 (1 month ago)	Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ... show more Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 Little Iguana	2026-05-06 15:47:12 (1 month ago)	trying to access non-authorized port	Port Scan
🇺🇸 TPI-Abuse	2026-05-01 23:02:24 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 19:02:19.679272 2026] [security2:error] [pid 2982:tid 2982] [client 104.207.33.114:63811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lovechicks.com"] [uri "/.env"] [unique_id "afUw-ySfoe30oKvE_DMnsgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-05-01 17:27:21 (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇫🇷 mrcrassi	2026-01-23 19:50:55 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 VHosting	2026-01-05 03:00:05 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 dpinse	2025-12-16 09:13:45 (6 months ago)	Suspicious URL access.	Hacking
🇺🇸 TPI-Abuse	2025-11-26 04:59:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 23:59:33.870258 2025] [security2:error] [pid 27455:tid 27455] [client 104.207.33.114:53691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sarawatt.com"] [uri "/.svn/wc.db"] [unique_id "aSaJNXo_eq0paXPyxkgPoAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:18:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:18:26.602680 2025] [security2:error] [pid 5392:tid 5413] [client 104.207.33.114:13739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kandooo.com"] [uri "/.svn/wc.db"] [unique_id "aSZVYjE9pbPJjmUZUrRRUQAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:23:44 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:23:23.593106 2025] [security2:error] [pid 7223:tid 7223] [client 104.207.33.114:20591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.isjustabitch.com"] [uri "/.svn/wc.db"] [unique_id "aSVZa6ye1q9HpZPuZdBkCQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:42:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:42:39.308446 2025] [security2:error] [pid 15087:tid 15087] [client 104.207.33.114:20531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.orozco-wallraff.com"] [uri "/.env"] [unique_id "aSVP3xfEm7nB2B5E9PumgwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 00:27:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:17:12.806473 2025] [security2:error] [pid 24890:tid 24890] [client 104.207.33.114:47541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.charityholidaycards.com"] [uri "/.git/HEAD"] [unique_id "aSOkCHxeiYSwo4WliMoHyQAAAGQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-23 20:18:08 (7 months ago)	104.207.33.114 - - [23/Nov/2025:21:18:07 +0100] "GET /.svn/wc.db HTTP/1.1" 403 363 "-" "Mozilla/5.0 ... show more 104.207.33.114 - - [23/Nov/2025:21:18:07 +0100] "GET /.svn/wc.db HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 216.26.243.254

🇹🇼 198.235.24.11

🇯🇵 172.253.6.216

🇫🇷 159.26.105.144

🇲🇴 125.31.4.70

🇨🇳 117.50.47.127

🇨🇳 101.42.1.32

🇳🇱 85.9.217.92

🇺🇸 66.132.195.63

🇨🇳 39.104.63.170

🇹🇼 35.194.214.164

🇨🇦 34.19.254.142

🇩🇪 31.76.44.51

🇻🇳 103.183.119.48

🇹🇳 102.159.30.79

🇺🇸 74.82.47.5

🇺🇸 66.132.172.156

🇩🇪 65.111.22.225

🇩🇪 45.135.141.13

🇩🇪 45.129.242.47