JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.138

104.207.33.138 was found in our database!

This IP was reported 156 times. Confidence of Abuse is 42%: ?

42%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.138

Whois 104.207.33.138

IP Abuse Reports for 104.207.33.138:

This IP address has been reported a total of 156 times from 27 distinct sources. 104.207.33.138 was first reported on June 11th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-12 08:44:47 (1 day ago)	104.207.33.138 - - [12/Jun/2026:10:44:47 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubu ... show more 104.207.33.138 - - [12/Jun/2026:10:44:47 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Hacking Web App Attack
Anonymous	2026-06-11 21:58:29 (2 days ago)	Web attack blocked by Wordfence on mergel.nu (1 hit). Reported by CRMON.	Web App Attack
🇲🇹 Malta	2026-06-10 04:48:41 (3 days ago)	104.207.33.138 - - [10/Jun/2026:06:48:41 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 104.207.33.138 - - [10/Jun/2026:06:48:41 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-06-10 02:45:43 (3 days ago)	[server.tmg.gr] httpd-login-spray-site: sites=tmg.gr.forms; logs=/var/log/httpd/domains/tmg.gr.forms ... show more [server.tmg.gr] httpd-login-spray-site: sites=tmg.gr.forms; logs=/var/log/httpd/domains/tmg.gr.forms.log; samples=site_wide=true \| distinct_ips=36 \| /wp-login.php show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-06-09 23:57:31 (4 days ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇫🇷 ELYAZ	2026-06-01 23:52:26 (1 week ago)	(y4) Failed scan -byebye- from 104.207.33.138 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-05-31 10:33:11 (1 week ago)	(y4) Failed scan -byebye- from 104.207.33.138 (US/United States/-): (CF_ENABLE)	Hacking
Anonymous	2026-05-28 19:41:11 (2 weeks ago)	[server.tmg.gr] httpd-login-spray-site: sites=aidshep2019.gr; logs=/var/log/httpd/domains/aidshep201 ... show more [server.tmg.gr] httpd-login-spray-site: sites=aidshep2019.gr; logs=/var/log/httpd/domains/aidshep2019.gr.log; samples=site_wide=true \| distinct_ips=33 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 ctrlpew	2026-05-19 01:01:00 (3 weeks ago)	WordPress login brute-force botnet targeting ctrlpew.com. Distributed IPs cycling every 3 seconds wi ... show more WordPress login brute-force botnet targeting ctrlpew.com. Distributed IPs cycling every 3 seconds with UA rotation. All attempts against non-existent usernames. 2026-05-18. show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-11 09:16:14 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-05-10 14:18:13 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-06 16:24:49 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 ne1for23	2026-05-04 05:28:39 (1 month ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 104.207.33.138 - - [04/May/2026:05:28:38 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trident/6.0; IEMobile/10.0; ARM; Touch; NOKIA; Lumia 920)" "-" show less	Hacking
🇺🇸 Epimetheus	2026-05-02 01:58:32 (1 month ago)	Unauthorized access attempts: [GET] /s3cmd.ini UA: Mozilla/5.0 (Linux; Android 9; MI 8) AppleWebKi ... show more Unauthorized access attempts: [GET] /s3cmd.ini UA: Mozilla/5.0 (Linux; Android 9; MI 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.42 Mobile Safari/537.36 show less	Web App Attack
🇫🇷 masterguru	2026-05-01 10:42:20 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.138 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 34.151.194.167

🇸🇬 240d:c010:c8:f::48

🇺🇸 162.216.150.78

🇺🇸 147.185.132.114

🇨🇳 113.215.189.173

🇺🇸 64.62.197.198

🇲🇾 47.250.38.242

🇺🇸 45.79.92.234

🇺🇸 43.162.112.238

🇨🇱 34.176.248.167

🇯🇵 34.104.146.187

🇸🇬 240d:c010:c8:d::59

🇺🇸 240d:c010:75:4::38

🇨🇳 223.68.7.235

🇺🇸 208.68.37.246

🇹🇭 203.170.192.251

🇧🇷 177.87.181.78

🇨🇦 165.245.239.34

🇧🇷 138.185.4.17

🇺🇸 116.212.188.141