JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.64

104.207.33.64 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.64

Whois 104.207.33.64

IP Abuse Reports for 104.207.33.64:

This IP address has been reported a total of 149 times from 27 distinct sources. 104.207.33.64 was first reported on June 5th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-07-24 12:28:31 (7 hours ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-23 12:11:47 (1 day ago)	Web App Attack	Web App Attack
Anonymous	2026-07-23 06:37:20 (1 day ago)	WordPress Brute Force	Brute-Force
🇮🇹 VHosting	2026-07-15 05:40:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 05:04:36 (1 week ago)	Web App Attack	Web App Attack
Anonymous	2026-07-05 21:07:58 (2 weeks ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 04:17:08 (2 weeks ago)	[Jul 5 06:17:08] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:700@154 ... show more [Jul 5 06:17:08] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.33.64:57170' (callid: 3955780fa19c284bc14ce766990f60b0) - No matching endpoint found [Jul 5 06:17:08] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.33.64:57170' (callid: 3955780fa19c284bc14ce766990f60b0) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 23:34:01 (2 weeks ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 20:47:07 (2 weeks ago)	[Jul 3 22:47:06] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:401@154 ... show more [Jul 3 22:47:06] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.33.64:29046' (callid: b432a99b64bd1c5e77e46ec9df436595) - No matching endpoint found [Jul 3 22:47:06] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '104.207.33.64:29046' (callid: b432a99b64bd1c5e77e46ec9df436595) - No matching endpoint found ... show less	Brute-Force Port Scan
🇱🇻 garmtech.com	2026-04-11 03:57:42 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-57.104.207.33.64.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-57.104.207.33.64.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-16 04:20:49 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 104.207.33.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 104.207.33.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 23:20:44.453083 2026] [security2:error] [pid 11390:tid 11390] [client 104.207.33.64:62893] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|primacomm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZKbHENgIqWQ66KrfucXFwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-24 06:55:18 (7 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-03 09:27:57 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 04:27:52.739941 2025] [security2:error] [pid 10227:tid 10227] [client 104.207.33.64:11019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scrippshs.org"] [uri "/.svn/wc.db"] [unique_id "aTACmMGyUtP-93tTSYtDzgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-10-31 12:31:10 (8 months ago)	(bad_user_agent) srv101 Bad User-Agent 104.207.33.64 (US/United States/-): 10 in the last 3600 secs; ... show more (bad_user_agent) srv101 Bad User-Agent 104.207.33.64 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:4e40:e000:0:26d:61a6:9895:f563

🇺🇸 205.210.31.72

🇺🇸 156.146.54.57

🇵🇱 79.133.202.126

🇫🇷 77.237.244.154

🇺🇸 45.33.65.239

🇨🇳 14.103.63.16

🇨🇳 223.199.188.111

🇬🇧 159.65.81.207

🇫🇷 109.205.182.48

🇩🇪 100.42.189.89

🇫🇷 86.48.3.3

🇩🇪 69.5.169.127

🇺🇸 23.239.12.207

🇺🇸 216.73.216.189

🇺🇸 192.241.248.28

🇦🇷 181.84.11.251

🇨🇳 140.250.88.164

🇰🇷 121.159.71.249

🇷🇺 109.173.39.103