JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.121

104.207.33.121 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 23%: ?

23%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.121

Whois 104.207.33.121

IP Abuse Reports for 104.207.33.121:

This IP address has been reported a total of 144 times from 20 distinct sources. 104.207.33.121 was first reported on June 11th 2024, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-07-24 08:54:20 (20 hours ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-23 08:03:17 (1 day ago)	Web App Attack	Web App Attack
🇮🇹 VHosting	2026-07-17 05:30:04 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-07-16 05:39:45 (1 week ago)	Web App Attack	Web App Attack
🇬🇧 PeravixGroup	2026-05-07 15:20:44 (2 months ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 CMT	2026-04-08 18:46:00 (3 months ago)	Trying to log into wordpress admin with depreciated creds.	Brute-Force Hacking
🇬🇧 relianoid.com	2026-02-22 22:39:22 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 Shadymint	2025-12-02 19:57:30 (7 months ago)	url probing from IP marked as abusive	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:53:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:53:23.475782 2025] [security2:error] [pid 10213:tid 10213] [client 104.207.33.121:10995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newmooncafe.com"] [uri "/.git/HEAD"] [unique_id "aS9Ds8me9u4QxYYVlh9YBwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:39:57 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:39:52.931995 2025] [security2:error] [pid 6377:tid 6377] [client 104.207.33.121:51823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idodat.com"] [uri "/.env"] [unique_id "aS6l2EEMq36GahYK6ZeqIQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 07:54:36 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:54:31.446049 2025] [security2:error] [pid 32556:tid 32556] [client 104.207.33.121:57863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "planetezfind.com"] [uri "/.svn/wc.db"] [unique_id "aS6bN6Rhoaa8VYKZrCguaAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:47:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:47:39.006102 2025] [security2:error] [pid 7398:tid 7398] [client 104.207.33.121:55687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homenetserv.com"] [uri "/.svn/wc.db"] [unique_id "aS5va88KyW13BvwOw6KzFgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:28:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:27:56.816730 2025] [security2:error] [pid 27468:tid 27468] [client 104.207.33.121:51077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honigcpa.com"] [uri "/.git/HEAD"] [unique_id "aS5qzN8U0aZ-UpMnb8tsZAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-24 09:55:28 (8 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:47:05 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:46:59.552973 2025] [security2:error] [pid 28225:tid 28225] [client 104.207.33.121:49791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bookguardian.net"] [uri "/.svn/wc.db"] [unique_id "aSQpk0hOci0jiIJWkmXm-wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 207.191.168.146

🇧🇷 200.233.133.100

🇹🇼 198.235.24.108

🇧🇷 187.180.160.199

🇩🇪 165.154.138.3

🇺🇸 147.185.132.48

🇩🇪 144.31.17.230

🇫🇷 91.196.152.100

🇮🇷 83.120.197.242

🇧🇷 45.160.89.245

🇺🇸 40.124.173.90

🇨🇳 39.89.135.142

🇺🇸 2604:a880:2:d1:0:1:51e4:a001

🇧🇷 177.23.34.42

🇺🇸 165.154.135.215

🇨🇦 162.219.178.250

🇺🇸 162.217.100.196

🇺🇸 162.216.150.215

🇳🇱 160.119.76.53

🇺🇸 159.65.98.214