JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.228

104.207.33.228 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.228

Whois 104.207.33.228

IP Abuse Reports for 104.207.33.228:

This IP address has been reported a total of 129 times from 16 distinct sources. 104.207.33.228 was first reported on June 12th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-06 12:41:59 (3 months ago)	Forum/form spam	Web Spam
🇦🇺 MAGIC	2026-03-01 01:27:10 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-02-14 12:55:40 (3 months ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-01-27 12:11:07 (4 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇪🇸 10dencehispahard SL	2026-01-26 07:22:14 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 inspectorgdgt	2025-12-24 22:00:00 (5 months ago)	VPN brute-force login attempts observed (bulk report).	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 09:55:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:55:19.096524 2025] [security2:error] [pid 17257:tid 17257] [client 104.207.33.228:32767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sethroland.com"] [uri "/.env"] [unique_id "aSbOhz9OQN0OjpC4TUCMWQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:40:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:40:08.943177 2025] [security2:error] [pid 3939:tid 3939] [client 104.207.33.228:47349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jfordclanrecipes.com"] [uri "/.git/HEAD"] [unique_id "aSagyG8Ji84lLF-hXfCUBwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 04:31:38 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 23:31:33.804177 2025] [security2:error] [pid 23473:tid 23473] [client 104.207.33.228:57717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastbrooktech.com"] [uri "/.env"] [unique_id "aSaCpdyGElJUfrK8U6VaugAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:46:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:46:28.922102 2025] [security2:error] [pid 12255:tid 12255] [client 104.207.33.228:24613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sumilondon.com"] [uri "/.env"] [unique_id "aSQNVMDypNau6ClnTZr4jwAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 23:19:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 18:19:27.774281 2025] [security2:error] [pid 5970:tid 5970] [client 104.207.33.228:46073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.piratecostumesonline.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRJy__gy6lgFw4Tqq_1QyAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 07:28:37 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-18 09:39:45 (7 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.18 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-14 16:54:56 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report timestamp show less	Hacking Brute-Force
🇬🇧 Nick Lewis	2025-10-02 23:40:34 (8 months ago)	104.207.33.228 (KR/South Korea/-), 5 distributed sshd attacks on account [redacted]	Brute-Force SSH

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.234.96.66

🇳🇱 178.16.53.13

🇩🇪 167.94.146.45

🇸🇪 85.229.46.153

🇷🇺 81.177.101.45

🇧🇬 79.124.62.126

🇱🇹 62.60.130.59

🇳🇱 45.148.10.141

🇺🇸 40.119.40.152

🇯🇵 8.216.17.157

🇩🇪 2a01:4f8:c2c:7b33::1

🇸🇬 194.5.82.30

🇫🇷 185.194.178.38

🇫🇮 155.212.37.50

🇪🇪 45.11.183.152

🇺🇸 192.178.66.81

🇭🇰 152.32.133.103

🇲🇾 47.254.248.7

🇳🇱 45.148.10.147

🇺🇸 37.19.221.181