JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.50

104.207.33.50 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.50

Whois 104.207.33.50

IP Abuse Reports for 104.207.33.50:

This IP address has been reported a total of 134 times from 11 distinct sources. 104.207.33.50 was first reported on June 4th 2024, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:48 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-26 09:04:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:04:07.501196 2025] [security2:error] [pid 4375:tid 4375] [client 104.207.33.50:36217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.circulodesonido.org"] [uri "/.svn/wc.db"] [unique_id "aSbCh-0CST4TxrKDV6RrNAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:34:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:34:52.105817 2025] [security2:error] [pid 30122:tid 30122] [client 104.207.33.50:42029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jazziientertainment.com"] [uri "/.env"] [unique_id "aSaRfEpFJLqm_6uzJvFFwgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:02:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:02:24.308626 2025] [security2:error] [pid 16492:tid 16492] [client 104.207.33.50:55545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aufflammen.com"] [uri "/.svn/wc.db"] [unique_id "aSZDkGZrdu-PDDR6MZMj6wAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:22:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:21:54.515037 2025] [security2:error] [pid 668297:tid 668297] [client 104.207.33.50:34113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.radiantmessages.com"] [uri "/.env"] [unique_id "aSUSwr384HWfbGSfZjhpBwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 01:30:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:30:33.640003 2025] [security2:error] [pid 20286:tid 20286] [client 104.207.33.50:9575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kentsavagelaw.com"] [uri "/.git/HEAD"] [unique_id "aSUGuTskeQITqczHzWCRfAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:00:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:00:29.113431 2025] [security2:error] [pid 24216:tid 24216] [client 104.207.33.50:32233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.salernospizza.com"] [uri "/.svn/wc.db"] [unique_id "aSQerWX6lc2-fEovMByXvwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:49:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:48:59.978633 2025] [security2:error] [pid 25012:tid 25012] [client 104.207.33.50:12081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mairslair.com"] [uri "/.git/HEAD"] [unique_id "aSP_24IILWePfQlhrXJ8vAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-18 23:45:41 (6 months ago)	(From [email protected]) Hello, Greetings from United Electrical Contractors. ... show more (From [email protected]) Hello, Greetings from United Electrical Contractors. After reviewing your services, we are interested in sourcing materials/services from your organization for an upcoming project. I am reaching out to inquire about your company’s current capacity, as we have a project scheduled to begin soon. Could you please provide a quotation for your services so we can proceed with our planning? Additionally, please review the attached document and let us know if you have any questions or if there are any updates regarding feasibility or capabilities. We are prepared to move forward once we receive your feedback. Regards, Mckee Sean show less	Phishing Web Spam
Anonymous	2025-11-14 04:40:49 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-10 08:52:49 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 104.207.33.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 03:52:43.273816 2025] [security2:error] [pid 7377:tid 7377] [client 104.207.33.50:16253] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.emrob.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.emrob.com"] [uri "/s3cmd.ini"] [unique_id "aRGn21g1OY96wognn5MdiQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-11-01 08:58:48 (7 months ago)	104.207.33.50 - - [01/Nov/2025:02:58:48 -0600] "POST /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5. ... show more 104.207.33.50 - - [01/Nov/2025:02:58:48 -0600] "POST /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" ... show less	Brute-Force
Anonymous	2025-10-11 07:15:32 (7 months ago)	Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.11 is noted in report t ... show more Attempted brute force login to web vpn 126 time(s); last attempt for 2025.10.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-10 21:45:00 (7 months ago)	Attempted brute force login to web vpn 217 time(s); last attempt for 2025.10.10 is noted in report t ... show more Attempted brute force login to web vpn 217 time(s); last attempt for 2025.10.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-09 19:44:06 (8 months ago)	Attempted brute force login to web vpn 216 time(s); last attempt for 2025.10.09 is noted in report t ... show more Attempted brute force login to web vpn 216 time(s); last attempt for 2025.10.09 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 103.124.137.202

🇹🇳 102.158.142.113

🇨🇦 216.126.86.80

🇳🇱 176.65.139.130

🇫🇷 91.196.152.209

🇹🇷 91.151.95.146

🇩🇪 45.155.172.34

🇬🇧 45.82.76.119

🇩🇪 34.179.214.253

🇺🇸 23.129.64.209

🇺🇸 200.10.44.151

🇵🇰 182.189.53.133

🇹🇬 156.38.73.89

🇵🇭 136.239.226.124

🇫🇷 91.231.89.42

🇳🇱 81.19.216.85

🇺🇸 66.132.172.204

🇸🇬 51.79.162.26

🇸🇬 47.84.130.19

🇷🇴 2.57.121.25