JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.68.46.207

38.68.46.207 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	Majestic Hosting Solutions, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396073
Domain Name	spinservers.com
Country	🇺🇸 United States of America
City	Plano, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.68.46.207

Whois 38.68.46.207

IP Abuse Reports for 38.68.46.207:

This IP address has been reported a total of 22 times from 17 distinct sources. 38.68.46.207 was first reported on December 27th 2020, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-04 08:40:19 (2 months ago)	Failed SPF check	Email Spam
🇺🇸 DiodeDave	2026-03-30 20:19:20 (3 months ago)	Attempted access after blacklisting	Email Spam
🇩🇪 Mirage F1	2024-09-02 06:49:00 (1 year ago)	38.68.46.207 - - [01/Sep/2024:23:18:14 +0200] "GET /.env HTTP/1.1"	Web App Attack
🇩🇪 GAS	2024-09-01 21:20:06 (1 year ago)	38.68.46.207 - - [01/Sep/2024:23:19:59 +0200] "GET /.env HTTP/1.1" 404 580 "-" "Mozilla/5.0 (X11; Li ... show more 38.68.46.207 - - [01/Sep/2024:23:19:59 +0200] "GET /.env HTTP/1.1" 404 580 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 38.68.46.207 - - [01/Sep/2024:23:20:00 +0200] "POST / HTTP/1.1" 404 580 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Port Scan
🇬🇧 SilverZippo	2024-08-30 21:43:21 (1 year ago)	Web App Attack	Web App Attack
🇫🇷 someone	2024-08-30 11:01:44 (1 year ago)	:80 38.68.46.207 - - [30/Aug/2024:13:01:42 +0200] "GET /.env HTTP/1.1" 301 477 "-" "Mozilla/5.0 (X1 ... show more :80 38.68.46.207 - - [30/Aug/2024:13:01:42 +0200] "GET /.env HTTP/1.1" 301 477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇺🇸 Starburst SysOp Team	2024-08-30 10:53:38 (1 year ago)	(mod_security-custom) mod_security (id:210492) triggered by 38.68.46.207 (US/United States/-): 1 in ... show more (mod_security-custom) mod_security (id:210492) triggered by 38.68.46.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Fri Aug 30 10:53:36.555895 2024] [:error] [pid 4116042:tid 4116127] [client 38.68.46.207:51840] [client 38.68.46.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "5.161.77.139"] [uri "/.env"] [unique_id "ZtGksAH8xSrfK5lDQHOCZgAAAEQ"] show less	Hacking
🇺🇸 ne1for23	2024-08-30 09:43:41 (1 year ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 38.68.46.207 - - [30/Aug/2024:09:43:40 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Hacking
🇯🇵 polido	2024-08-29 21:57:09 (1 year ago)	Unauthorized connection attempt to port 80 from 38.68.46.207	Port Scan
🇫🇷 someone	2024-08-29 15:21:37 (1 year ago)	:80 38.68.46.207 - - [29/Aug/2024:17:21:35 +0200] "GET /.env HTTP/1.1" 301 477 "-" "Mozilla/5.0 (X1 ... show more :80 38.68.46.207 - - [29/Aug/2024:17:21:35 +0200] "GET /.env HTTP/1.1" 301 477 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇯🇵 polido	2024-08-27 04:01:32 (1 year ago)	Unauthorized connection attempt to port 80 from 38.68.46.207	Port Scan
🇦🇷 Cerbero	2024-08-26 17:36:00 (1 year ago)	AndroxGh0st.Malware	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2024-08-26 16:52:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 38.68.46.207 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 38.68.46.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 12:52:12.634935 2024] [security2:error] [pid 10566:tid 10566] [client 38.68.46.207:54579] [client 38.68.46.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.102"] [uri "/.env"] [unique_id "ZsyyvHZi1-wrZ54cz1h2rQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2024-08-26 15:05:48 (1 year ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇯🇵 polido	2024-08-25 07:18:27 (1 year ago)	Unauthorized connection attempt to port 80 from 38.68.46.207	Port Scan

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.255.205.162

🇷🇺 193.233.88.205

🇦🇷 186.130.29.233

🇫🇷 185.66.234.228

🇺🇸 172.104.30.66

🇮🇩 163.7.5.228

🇨🇳 150.139.201.247

🇭🇰 47.86.22.247

🇭🇰 40.83.95.132

🇬🇧 2a06:4884:7000::8b

🇺🇸 209.85.221.230

🇺🇸 193.202.11.112

🇺🇸 162.0.247.102

🇧🇷 138.117.167.97

🇺🇸 104.207.37.22

🇭🇰 103.24.95.51

🇹🇼 34.80.213.16

🇨🇳 14.103.127.82

🇹🇼 198.235.24.108

🇺🇸 193.187.150.93