JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.146

104.207.48.146 was found in our database!

This IP was reported 148 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.146

Whois 104.207.48.146

IP Abuse Reports for 104.207.48.146:

This IP address has been reported a total of 148 times from 19 distinct sources. 104.207.48.146 was first reported on June 19th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-09 15:03:10 (3 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 masterguru	2026-05-06 17:04:46 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-05 09:38:08 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:43:11 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-25 15:12:05 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-23 13:06:34 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-18 14:04:29 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.48.146 (BR/Brazil/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2026-02-19 03:36:53 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:36:47.448031 2026] [security2:error] [pid 9130:tid 9130] [client 104.207.48.146:55377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kidswithcamerasmovie.com"] [uri "/.env.save"] [unique_id "aZaFT12OEC3a09CYNKzWVAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2026-02-19 03:05:25 (3 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 02:12:33 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:12:26.319598 2026] [security2:error] [pid 14536:tid 14536] [client 104.207.48.146:46317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathyquan.com"] [uri "/backend/.env"] [unique_id "aZZxitE-HlCHgbJSYIt3HgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:40:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:40:29.958905 2026] [security2:error] [pid 156165:tid 156165] [client 104.207.48.146:48895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thinkingepic.com"] [uri "/.env.production"] [unique_id "aZYHnaDiyHYtmm4wpz7ShwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:46:29 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:46:20.375946 2026] [security2:error] [pid 32233:tid 32233] [client 104.207.48.146:41957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waltersnet.com"] [uri "/.env.local"] [unique_id "aZWmjK30gTbOi_NGnzRzxwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (3 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 nowyouknow	2026-01-01 20:15:08 (5 months ago)	(From [email protected]) Hello there, A single qualified lead can often justify $250. For t ... show more (From [email protected]) Hello there, A single qualified lead can often justify $250. For that same cost, you can have a dedicated Digital Marketing Assistant working full-time on SEO, ads, email marketing, social channels, and routine operations. Your first month is free to evaluate results. Complete the form below to claim your virtual assistant free for one month Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-01-01 11:50:51 (5 months ago)	(From [email protected]) Hi there, For $250/month, you can secure a full-time Digital Marke ... show more (From [email protected]) Hi there, For $250/month, you can secure a full-time Digital Marketing Assistant trained in SEO, online ads, social media, email marketing, and routine marketing operations. Your first month is free so you can evaluate performance without cost. Begin by completing the form below. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam

Showing 1 to 15 of 148 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.53

🇸🇬 47.84.195.65

🇲🇾 2001:e68:5e12:ce00:8820:823d:9a55:b1

🇬🇧 198.244.240.201

🇬🇧 193.163.125.43

🇺🇸 162.216.150.187

🇺🇸 162.216.149.5

🇺🇸 150.107.36.244

🇧🇩 118.179.124.105

🇸🇾 89.43.135.40

🇳🇱 45.156.87.127

🇨🇳 118.145.110.18

🇮🇩 118.99.102.207

🇭🇰 103.243.24.124

🇳🇱 45.148.10.174

🇳🇱 45.148.10.141

🇸🇬 43.98.169.96

🇧🇪 34.76.120.151

🇨🇳 14.103.107.29

🇺🇸 173.244.60.155