JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.137

104.207.33.137 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.137

Whois 104.207.33.137

IP Abuse Reports for 104.207.33.137:

This IP address has been reported a total of 135 times from 16 distinct sources. 104.207.33.137 was first reported on June 11th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 billyborsht	2026-06-30 07:23:36 (1 hour ago)	2026-06-30T19:23:35.572425+12:00 southern wordpress(nzangels.com)[1743907]: Authentication attempt f ... show more 2026-06-30T19:23:35.572425+12:00 southern wordpress(nzangels.com)[1743907]: Authentication attempt for unknown user [email protected] from 104.207.33.137 ... show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-26 00:08:09 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇩🇪 SCHAPPY	2026-06-25 12:30:42 (4 days ago)	Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST c ... show more Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST counter 1 is greater than GET counter 0, captcha counter for /wp-login.php by 104.207.33.137. show less	Web Spam
🇩🇪 LRob.fr	2025-12-30 23:50:02 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-30 05:45:06 (6 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2025-12-30 02:59:59 (6 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 20:12:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 15:12:38.577833 2025] [security2:error] [pid 26770:tid 26856] [client 104.207.33.137:59193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schecter.org"] [uri "/.svn/wc.db"] [unique_id "aSdfNqYYBb1oBezR6MbdbwAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 18:10:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:10:05.177056 2025] [security2:error] [pid 83958:tid 83982] [client 104.207.33.137:47057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kylight.com"] [uri "/.svn/wc.db"] [unique_id "aSdCfdeokHOSXvzPz8HSBQAAAJU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:45:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:45:53.035020 2025] [security2:error] [pid 28519:tid 28519] [client 104.207.33.137:52233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dmimx.com"] [uri "/.git/HEAD"] [unique_id "aSU0gQr6DJqDIa4-3auCfQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:53:24 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:53:19.312389 2025] [security2:error] [pid 10129:tid 10129] [client 104.207.33.137:49783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wexfordcap.com"] [uri "/.env"] [unique_id "aSUoL75oDpxjjgsy2MOJLgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:09:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:09:37.576855 2025] [security2:error] [pid 14355:tid 14355] [client 104.207.33.137:36175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stinkingpink.com"] [uri "/.svn/wc.db"] [unique_id "aSUP4UlJIFRV4iP748FatwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:42:56 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:42:48.794730 2025] [security2:error] [pid 10363:tid 10363] [client 104.207.33.137:17545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.noelramos.com"] [uri "/.svn/wc.db"] [unique_id "aSPiSGxbedBcjS7gFe9sRwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 02:18:32 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-19 12:03:51 (8 months ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.10.19 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-18 16:09:07 (8 months ago)	Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 72 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.121

🇪🇬 154.183.42.248

🇨🇳 124.223.187.91

🇮🇳 122.187.229.175

🇹🇼 104.199.234.48

🇧🇩 103.240.2.47

🇱🇺 64.89.160.222

🇮🇳 59.93.243.239

🇨🇳 36.106.166.139

🇺🇸 23.29.118.224

🇵🇭 216.247.46.87

🇺🇸 216.73.160.168

🇿🇦 197.185.128.221

🇬🇧 194.50.235.141

🇲🇽 189.203.145.85

🇳🇱 185.223.235.50

🇹🇷 176.33.65.163

🇺🇸 138.68.255.210

🇨🇳 116.179.37.92

🇻🇳 113.176.185.8