JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.33.88

104.207.33.88 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.33.88

Whois 104.207.33.88

IP Abuse Reports for 104.207.33.88:

This IP address has been reported a total of 148 times from 20 distinct sources. 104.207.33.88 was first reported on June 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-05-30 00:53:32 (1 week ago)	dot file probe	Web App Attack
🇬🇧 PeravixGroup	2026-05-22 11:43:28 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 Hazzard	2026-05-16 08:24:56 (3 weeks ago)	(wordpress) Failed wordpress login from 104.207.33.88 (US/United States/Virginia/Ashburn/-/[redacted ... show more (wordpress) Failed wordpress login from 104.207.33.88 (US/United States/Virginia/Ashburn/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇨🇳 ThreatBook.io	2026-04-19 23:34:59 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.33.88 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.33.88 2026-04-19 17:00:37 /v3/api-docs show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-17 23:25:52 (1 month ago)	ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.33.88 2 ... show more ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.33.88 2026-04-17 05:03:57 /swagger/v1/swagger.json 2026-04-17 05:03:58 /api/swagger.json 2026-04-17 05:03:56 /prod-api/v2/api-docs 2026-04-17 05:03:59 /v3/api-docs 2026-04-17 05:03:57 /v2/api-docs 2026-04-17 05:03:58 /swagger/docs/v1 show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 23:11:54 (1 month ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.33.8 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.33.88 2026-04-11 21:32:43 / show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-02-24 05:11:51 (3 months ago)	2026-02-24 06:11:51 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇮🇹 VHosting	2026-02-18 22:19:19 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 F242	2026-01-30 06:05:00 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇨🇳 ThreatBook.io	2026-01-13 23:39:53 (4 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.33.88 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.33.88 2026-01-13 01:53:05 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-23 23:28:29 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.33.88 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.33.88 2025-12-23 09:08:01 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2025-12-23 06:16:37 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2025-12-23 09:08:00 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-15 23:44:08 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.33.88 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.33.88 2025-12-15 22:38:54 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2025-12-15 18:58:42 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2025-12-15 22:38:55 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
Anonymous	2025-12-15 22:44:50 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 08:37:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:42.478228 2025] [security2:error] [pid 8492:tid 8492] [client 104.207.33.88:28501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.runnercomics.com"] [uri "/.env"] [unique_id "aSQZVkzmrEQpMlBQ2p_nMAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:13:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.33.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.33.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:12:55.589984 2025] [security2:error] [pid 17188:tid 17188] [client 104.207.33.88:45095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lynetteharris.net"] [uri "/.env"] [unique_id "aSQFdwt69whwtIiH_Aqd_QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 202.136.148.147

🇬🇧 193.176.29.10

🇳🇱 176.65.148.99

🇨🇳 117.33.242.50

🇧🇪 35.195.3.235

🇺🇸 20.169.104.237

🇮🇪 4.210.91.174

🇮🇩 206.84.101.90

🇨🇴 190.90.154.74

🇬🇧 188.240.59.60

🇬🇧 188.240.59.52

🇲🇽 187.140.196.75

🇮🇷 185.2.14.214

🇺🇸 147.185.132.89

🇨🇳 119.123.168.192

🇬🇧 89.34.96.151

🇱🇹 81.30.98.142

🇩🇪 69.5.169.118

🇮🇳 61.1.116.149

🇳🇱 51.158.205.47