JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.125

104.207.33.125 was found in our database!

This IP was reported 165 times. Confidence of Abuse is 41%: ?

41%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.125

Whois 104.207.33.125

IP Abuse Reports for 104.207.33.125:

This IP address has been reported a total of 165 times from 41 distinct sources. 104.207.33.125 was first reported on June 6th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-28 22:15:49 (1 day ago)	[22:15] Attempted HTTPS GlobalProtect login with credentials schneider:Pa*****d1	Web App Attack
🇪🇸 raiolanetworks.com	2026-09-20 16:49:35 (1 week ago)	Honeypot detection: Cisco ASA exploit attempt. 6 events observed. Reported automatically from a hone ... show more Honeypot detection: Cisco ASA exploit attempt. 6 events observed. Reported automatically from a honeypot sensor. show less	Hacking
🇺🇦 URAN Publishing Service	2026-09-14 10:34:57 (2 weeks ago)	[14/Sep/2026:13:34:57 +0300] -- 104.207.33.125 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /xml ... show more [14/Sep/2026:13:34:57 +0300] -- 104.207.33.125 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /xmlrpc.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-12 17:11:20 (2 weeks ago)	[12/Sep/2026:20:11:20 +0300] -- 104.207.33.125 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [12/Sep/2026:20:11:20 +0300] -- 104.207.33.125 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇯🇵 beon	2026-09-11 07:39:24 (2 weeks ago)	[DateTime=>2026-09-11T07:39:24Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/wp-login.php] , [total_H ... show more [DateTime=>2026-09-11T07:39:24Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/wp-login.php] , [total_Hit=>once] , [Keyword=>WordPress] show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-09-10 11:12:06 (2 weeks ago)	(wplogin_block) Blocked WP-Login Access Attempt 104.207.33.125 (US/United States/Virginia/Ashburn/-/ ... show more (wplogin_block) Blocked WP-Login Access Attempt 104.207.33.125 (US/United States/Virginia/Ashburn/-/[AS200373 3xK Tech GmbH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.207.33.125 - - [10/Sep/2026:14:03:54 +0300] "GET /wp-login.php HTTP/2.0" 403 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0" show less	Port Scan
🇨🇭 backslash	2026-09-09 02:06:01 (3 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Sklurk	2026-09-08 02:11:49 (3 weeks ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-08-21 08:39:35 (1 month ago)	Brute force	Brute-Force
🇳🇿 Antinson	2026-08-17 03:56:04 (1 month ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 Sklurk	2026-08-11 01:47:45 (1 month ago)	Web App Attack	Web App Attack
🇳🇱 thedreamer.nl	2026-08-08 19:06:33 (1 month ago)	104.207.33.125 - - [08/Aug/2026:21:04:52 +0200] "GET /.git/objects/69/372a32000000000000080104107929 ... show more 104.207.33.125 - - [08/Aug/2026:21:04:52 +0200] "GET /.git/objects/69/372a32000000000000080104107929000081a4 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 104.207.33.125 - - [08/Aug/2026:21:05:02 +0200] "GET /.git/objects/75/cc52a62c5f5e6ec13b54c2e06bdce035814880 HTTP/1.1" 200 690 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 104.207.33.125 - - [08/Aug/2026:21:05:03 +0200] "GET /.git/objects/28/db707587c591adb6b57fd8730f9378885eb0b4 HTTP/1.1" 404 118 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" 104.207.33.125 - - [08/Aug/2026:21:05:34 +0200] "GET /.git/objects/05/21ba5873c2574927c12bc8386198d6bed2fb13 HTTP/1.1" 200 606 "-" "git/2.40.0" "US" "Ashburn" "39.04690" "-77.49030" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 Vianpyro	2026-07-28 20:34:25 (2 months ago)	Honeypot: 8 request(s) in 32 min. Paths: /api/.env/.git/config, /.env.production/.git/config, /.env/ ... show more Honeypot: 8 request(s) in 32 min. Paths: /api/.env/.git/config, /.env.production/.git/config, /.env/.git/config, /.aws/credentials/.git/config. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 200373 (3xK Tech GmbH). show less	Web App Attack Bad Web Bot Hacking
🇪🇸 NullBlue	2026-07-12 10:02:41 (2 months ago)	Web app attack: scanning for secrets/exploits (.env/.git/PHPUnit CVE). Captured by NullBlue67 honeyp ... show more Web app attack: scanning for secrets/exploits (.env/.git/PHPUnit CVE). Captured by NullBlue67 honeypot. show less	Hacking Web App Attack
🇧🇪 cmbplf	2026-07-09 01:44:45 (2 months ago)	1.403 requests with url.path .git/	Brute-Force Bad Web Bot

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.123.148

🇧🇷 205.210.31.136

🇺🇸 173.77.182.8

🇺🇸 20.65.171.51

🇷🇸 5.252.237.106

🇱🇹 213.176.26.72

🇸🇪 185.246.128.133

🇨🇴 152.200.181.42

🇰🇿 95.141.133.202

🇦🇪 80.227.102.242

🇳🇱 77.239.124.204

🇺🇸 65.49.1.189

🇺🇸 48.217.48.135

🇦🇷 45.232.17.160

🇺🇸 20.84.123.144

🇬🇧 2.57.17.55

🇺🇸 216.73.161.91

🇺🇸 216.25.89.74

🇫🇷 173.249.33.72

🇯🇵 165.154.241.44