JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.207.33.167

Activity Trending Down

Abuse Confidence Score

29% Elevated

155 reports

34 reporters · latest 1 week ago

ISP: 3xK Tech GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200373
Domain Name: 3xktech.cloud
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

155 from 34 distinct reporters

First reported

June 5th 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇪🇸 Spain 6 🇺🇸 United States of America 2 🇧🇷 Brazil 1

Most common categories Web App Attack 6 Brute-Force 3 Hacking 2 Port Scan 1 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-15 01:06:44 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:06:39.887970 2026] [security2:error] [pid 2169:tid 2265] [client 104.207.33.167:27125] M ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:06:39.887970 2026] [security2:error] [pid 2169:tid 2265] [client 104.207.33.167:27125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mtiminis.com"] [uri "/new/.git/config"] [unique_id "aZEcH3CmiqKc9qeqCdLY0AAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 00:35:16 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:35:10.750151 2026] [security2:error] [pid 19420:tid 19420] [client 104.207.33.167:22397] ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:35:10.750151 2026] [security2:error] [pid 19420:tid 19420] [client 104.207.33.167:22397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mountainjaytherapy.com"] [uri "/.env.save"] [unique_id "aZEUvp4PtXZu-6oSDdHo1gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-14 22:59:23 UTC · (8 months ago)	Auto-ban: >3000 req/min op 2026-02-14	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-14 22:50:51 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:50:45.206417 2026] [security2:error] [pid 17723:tid 17723] [client 104.207.33.167:47293] ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:50:45.206417 2026] [security2:error] [pid 17723:tid 17723] [client 104.207.33.167:47293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morganmotors.com"] [uri "/admin/.git/config"] [unique_id "aZD8RWCXIfN4K87MT1kL0gAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 22:34:42 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:34:36.785462 2026] [security2:error] [pid 543898:tid 543898] [client 104.207.33.167:5477 ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:34:36.785462 2026] [security2:error] [pid 543898:tid 543898] [client 104.207.33.167:54773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.com.au"] [uri "/api/.env"] [unique_id "aZD4fJBDOJoc4O4wi1jEzgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 22:18:19 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:18:14.743025 2026] [security2:error] [pid 16061:tid 16061] [client 104.207.33.167:13163] ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:18:14.743025 2026] [security2:error] [pid 16061:tid 16061] [client 104.207.33.167:13163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mollins.com"] [uri "/.env.production"] [unique_id "aZD0ppQdi0Pr73kuarTGcwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 IROK	2026-02-14 22:16:09 UTC · (8 months ago)	Malware/WebShell Scan blocked by ModSecurity ...	Hacking
🇺🇸 TPI-Abuse	2026-02-14 21:24:09 UTC · (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 16:24:01.167105 2026] [security2:error] [pid 6860:tid 6860] [client 104.207.33.167:63493] M ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 16:24:01.167105 2026] [security2:error] [pid 6860:tid 6860] [client 104.207.33.167:63493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miroddi.com"] [uri "/backend/.env"] [unique_id "aZDn8av9mKjRJOuzvJ9NhgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-07 08:32:43 UTC · (10 months ago)	attempts to hack passwords	Brute-Force Web App Attack
Anonymous	2025-12-24 11:19:41 UTC · (10 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2025-12-12 02:11:33 UTC · (10 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇦🇺 AWW-Admin	2025-10-29 13:35:08 UTC · (1 year ago)	(wordpress) Failed wordpress login from 104.207.33.167 (US/United States/-)	Brute-Force
Anonymous	2025-10-27 00:49:14 UTC · (1 year ago)	wordpress-trap	Web App Attack
🇵🇱 sefinek.net	2025-10-21 12:23:39 UTC · (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: http ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-17 18:36:14 UTC · (1 year ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 31 to 45 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 204.8.96.122

🇷🇸 178.220.212.82

🇧🇩 160.187.108.217

🇨🇳 111.59.179.40

🇨🇳 110.166.67.189

🇺🇸 104.55.62.255

🇺🇸 66.132.159.141

🇫🇮 45.147.10.197

🇲🇩 37.221.66.66

🇭🇰 20.2.89.114

🇻🇳 14.191.129.54

🇸🇬 2a13:f47:5112:baee:4058:36c2:69c6:6395

🇻🇳 222.254.171.99

🇸🇬 212.73.148.6

🇧🇷 205.210.31.237

🇷🇴 193.32.162.148

🇳🇱 185.136.15.16

🇲🇾 183.171.49.152

🇲🇦 160.176.43.168

🇩🇪 151.243.11.26