JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.38.33

104.207.38.33 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 8%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.38.33

Whois 104.207.38.33

IP Abuse Reports for 104.207.38.33:

This IP address has been reported a total of 130 times from 14 distinct sources. 104.207.38.33 was first reported on June 13th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-09 23:14:00 (3 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-08 17:29:33 (1 month ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇧🇪 cmbplf	2026-05-06 02:35:00 (1 month ago)	697 requests with url.path *.env	Brute-Force Bad Web Bot
🇮🇩 Kencang.ID	2026-02-25 01:00:10 (4 months ago)	Failed Login Attempt 2026-02-25 01:00:10 \| 104.207.38.33 \| Desktop \| Safari \| Ashburn, Virginia, Uni ... show more Failed Login Attempt 2026-02-25 01:00:10 \| 104.207.38.33 \| Desktop \| Safari \| Ashburn, Virginia, United States \| 3xK Tech GmbH \| Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 show less	Brute-Force FTP Brute-Force
🇱🇻 garmtech.com	2026-02-15 07:11:54 (4 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2025-12-26 22:44:47 (6 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 21:51:10 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:51:01.824496 2025] [security2:error] [pid 1855408:tid 1855454] [client 104.207.38.33:49343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgementz.org"] [uri "/.svn/wc.db"] [unique_id "aSjHxf8uxFESw4R4U0a14gAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-11-26 04:23:59 (7 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.38.33 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.38.33 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:26:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:26:39.068852 2025] [security2:error] [pid 14870:tid 14870] [client 104.207.38.33:49087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.radiointernational.net"] [uri "/.env"] [unique_id "aSP6n0sNugJAJqZCq4i17wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:44:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.38.33 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.38.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:43:33.466580 2025] [security2:error] [pid 32525:tid 32525] [client 104.207.38.33:28073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.digitview.com"] [uri "/.svn/wc.db"] [unique_id "aSPwhZP7F51kdVVMLw8J1wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 00:54:18 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇦🇺 oncord	2025-11-10 10:09:54 (7 months ago)	Form spam	Web Spam
Anonymous	2025-10-18 19:31:53 (8 months ago)	Attempted brute force login to web vpn 92 time(s); last attempt for 2025.10.18 is noted in report ti ... show more Attempted brute force login to web vpn 92 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-15 12:03:46 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-14 13:08:45 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.159

🇺🇸 162.216.149.133

🇨🇳 116.232.22.43

🇻🇳 103.48.192.48

🇳🇱 45.148.10.152

🇩🇪 43.228.157.211

🇨🇳 14.103.117.98

🇹🇼 198.235.24.83

🇹🇼 198.235.24.47

🇺🇸 154.217.253.190

🇮🇩 114.10.134.235

🇺🇸 104.28.251.193

🇸🇬 20.212.60.221

🇺🇦 194.9.71.21

🇸🇬 146.190.105.164

🇨🇳 106.12.4.165

🇵🇱 95.214.54.53

🇺🇸 8.235.11.7

🇺🇸 173.239.254.141

🇺🇸 162.216.150.240