JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.188

104.207.33.188 was found in our database!

This IP was reported 166 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.188

Whois 104.207.33.188

IP Abuse Reports for 104.207.33.188:

This IP address has been reported a total of 166 times from 30 distinct sources. 104.207.33.188 was first reported on June 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-04-26 17:42:26 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 solution.it	2026-04-25 15:07:29 (1 month ago)	[Sat Apr 25 17:07:29.246104 2026] [php7:error] [pid 2523751:tid 2523751] [client 104.207.33.188:5286 ... show more [Sat Apr 25 17:07:29.246104 2026] [php7:error] [pid 2523751:tid 2523751] [client 104.207.33.188:52867] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-04-22 23:57:51 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-19 22:22:14 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-18 14:06:06 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-16 13:44:51 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.33.188 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-03-02 21:08:29 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 16:08:20.676848 2026] [security2:error] [pid 14183:tid 14183] [client 104.207.33.188:35057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodgersboosterclub.com"] [uri "/.env"] [unique_id "aaX8RNKauKGWexMDU8AV9wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2026-02-16 04:54:34 (3 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /wp/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2026-02-15 20:11:35 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2026-02-15 12:33:40 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:33:33.338051 2026] [security2:error] [pid 8950:tid 8950] [client 104.207.33.188:26953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sguard.co"] [uri "/app/.env"] [unique_id "aZG9HV1dCvNMzxNH34nrYgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mario Silber	2026-02-15 12:12:51 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 104.207.33.188 (US/United States/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-02-15 11:38:22 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:38:18.378984 2026] [security2:error] [pid 531:tid 531] [client 104.207.33.188:46551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pacepk.com"] [uri "/config/.env"] [unique_id "aZGwKlWOoUDxfdTPFzJangAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 David Ferneding	2026-02-15 11:04:39 (3 months ago)	Blocked by UFW (TCP on 80) Source port: 50613 TTL: 55 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 50613 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 104.207.33.188) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:13:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:13:52.223075 2026] [security2:error] [pid 10784:tid 10784] [client 104.207.33.188:15881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schunagroup.com"] [uri "/.env.staging"] [unique_id "aZFkIKbWIoWtUKTzGLLDTQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 166 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 179.43.146.227

🇷🇺 176.112.128.143

🇺🇸 162.216.149.158

🇰🇷 106.246.89.68

🇧🇬 91.92.40.200

🇹🇷 78.189.17.35

🇨🇳 58.214.144.126

🇭🇰 45.249.247.45

🇧🇷 45.238.2.60

🇳🇱 45.156.87.254

🇳🇱 45.156.87.93

🇮🇩 43.157.248.178

🇸🇬 43.134.230.165

🇬🇧 35.203.211.93

🇷🇺 31.173.30.232

🇬🇧 31.14.254.124

🇳🇵 27.34.70.213

🇬🇧 188.240.59.6

🇫🇷 188.165.200.90

🇲🇽 187.191.48.22