JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.48.38

104.207.48.38 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.48.38

Whois 104.207.48.38

IP Abuse Reports for 104.207.48.38:

This IP address has been reported a total of 141 times from 16 distinct sources. 104.207.48.38 was first reported on June 20th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 nzhost.co.nz	2026-02-19 12:32:55 (3 months ago)	$f2bV_matches	Hacking Brute-Force
🇳🇱 homeshowdomain.nl	2026-02-13 22:59:35 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-13	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-13 05:53:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:53:31.776694 2026] [security2:error] [pid 1393544:tid 1393544] [client 104.207.48.38:51539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konar-steenberg.com"] [uri "/test/.git/config"] [unique_id "aY68W3DcWsRFcVIt2J7R3AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 nzhost.co.nz	2026-02-13 05:38:45 (3 months ago)	$f2bV_matches	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-02-13 04:19:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:19:03.518569 2026] [security2:error] [pid 10515:tid 10515] [client 104.207.48.38:26601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anniversaryprintednapkins.com"] [uri "/.git/config"] [unique_id "aY6mN1FpcbSFMbMPECyw4AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:47:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:47:02.932075 2026] [security2:error] [pid 1908034:tid 1908107] [client 104.207.48.38:51323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killerrockandroll.com"] [uri "/.git/config"] [unique_id "aY6etmyow04PUXjo15V7gwAAAck"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:56:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:56:29.113256 2026] [security2:error] [pid 5979:tid 5979] [client 104.207.48.38:16361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ketsuri.com"] [uri "/backend/.env"] [unique_id "aY6S3dBNqgnnID88U2PehwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:33:17 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:33:09.169716 2026] [security2:error] [pid 11142:tid 11142] [client 104.207.48.38:53425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ken-parker.com"] [uri "/.env.save"] [unique_id "aY6NZQN5V7YybNGW4qh4WAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:01:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:01:52.380313 2026] [security2:error] [pid 2297:tid 2297] [client 104.207.48.38:43487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kccares.help"] [uri "/admin/.env"] [unique_id "aY6GEJZcq8LSJ3ujCKqzvQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-13 01:53:06 (3 months ago)	Blocking for trying to access an exploit file: /v2/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-13 01:42:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:41:59.642958 2026] [security2:error] [pid 2052841:tid 2052841] [client 104.207.48.38:53837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katisfaction.nl"] [uri "/test/.git/config"] [unique_id "aY6BZxBqsGS_OBgZYMM2BwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 20:34:52 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:34:48.623649 2026] [security2:error] [pid 7516:tid 7516] [client 104.207.48.38:54947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brinkworthmodels.com"] [uri "/.env"] [unique_id "aY45aM7vELKE5-SjF_PGfQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 18:43:46 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 13:43:40.986540 2026] [security2:error] [pid 32447:tid 32447] [client 104.207.48.38:61301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "essav.net"] [uri "/.git/config"] [unique_id "aY4fXMQriUlCL33iRsPmvAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 11:48:12 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 06:48:07.808294 2026] [security2:error] [pid 2289:tid 2289] [client 104.207.48.38:59233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edlee.biz"] [uri "/test/.git/config"] [unique_id "aYxsdxh7-U4QkpiRybFkKQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 07:53:32 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.48.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 02:53:27.372395 2026] [security2:error] [pid 5971:tid 5971] [client 104.207.48.38:64969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cossey.me"] [uri "/new/.git/config"] [unique_id "aYw1d42bSYGdZcz3JWMwggAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 95.215.0.144

🇵🇹 2.83.16.50

🇺🇸 185.180.141.43

🇮🇳 103.210.95.78

🇮🇪 80.233.12.109

🇺🇸 136.116.198.170

🇨🇳 111.4.78.74

🇷🇺 109.194.108.203

🇺🇸 66.132.186.239

🇸🇬 45.78.235.96

🇷🇴 2.57.121.25

🇷🇺 178.208.236.58

🇰🇷 165.154.52.159

🇧🇷 131.108.60.134

🇩🇪 130.12.181.107

🇺🇸 20.65.193.225

🇷🇺 188.92.241.150

🇨🇳 121.41.119.186

🇨🇳 61.133.86.70

🇮🇷 46.167.151.205