JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.238.30.39

104.238.30.39 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	AkhaliNet LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209183
Domain Name	akhali.net
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.238.30.39

Whois 104.238.30.39

IP Abuse Reports for 104.238.30.39:

This IP address has been reported a total of 32 times from 22 distinct sources. 104.238.30.39 was first reported on February 17th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 windowsforum	2026-03-01 15:49:12 (3 months ago)	Spam bot registration: triggers=js_challenge, inv_honeypot, pow_fail, username=Marita5056	Web Spam Bad Web Bot
🇺🇸 nowyouknow	2026-03-01 07:27:03 (3 months ago)	(From [email protected]) Hi there, This is Lisa from Your VA Choice. We provide virtual as ... show more (From [email protected]) Hi there, This is Lisa from Your VA Choice. We provide virtual assistants for social media, cold calling, admin support, customer service, data entry, lead generation, calendar and email management, content creation, and more. Reply YES to schedule a call or STOP to unsubscribe. Thank you! show less	Phishing Web Spam
🇺🇸 etu brutus	2026-03-01 01:34:51 (3 months ago)	104.238.30.39 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 nowyouknow	2026-02-28 20:01:37 (3 months ago)	(From [email protected]) Hello, I hope you're doing well. I came across your business an ... show more (From [email protected]) Hello, I hope you're doing well. I came across your business and just wanted to reach out respectfully. My team provides skilled Virtual Assistants who help reduce workload and streamline operations. If you already have support, that’s wonderful — but if you ever consider delegating tasks, I’d be glad to offer assistance whenever needed. show less	Phishing Web Spam
🇩🇪 IP Analyzer	2026-02-28 19:00:20 (3 months ago)	Unauthorized connection attempt from IP address 104.238.30.39 on Port 465(SMTPS)	Port Scan
🇩🇪 IP Analyzer	2026-02-28 18:36:45 (3 months ago)	Unauthorized connection attempt from IP address 104.238.30.39	Brute-Force
🇧🇪 cmbplf	2026-02-28 03:04:32 (3 months ago)	2.353 requests from abuseipdb.com blacklisted IP (1yr2mos3w)	Brute-Force Bad Web Bot
🇦🇱 cheatmaster.store	2026-02-27 02:16:44 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Sweden Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇳🇱 DrLex0	2026-02-26 15:15:10 (3 months ago)	Web spam on hidden bait web form	Web Spam
🇺🇸 oncord	2026-02-26 07:40:45 (3 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-25 13:05:31 (3 months ago)	(mod_security) mod_security (id:217280) triggered by 104.238.30.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 104.238.30.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 08:05:22.368907 2026] [security2:error] [pid 29976:tid 29976] [client 104.238.30.39:40579] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|photo-craft.org\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "photo-craft.org"] [uri "/contact.html"] [unique_id "aZ7zknc-rIRgPja8iP2C3QAAAAc"], referer: http://photo-craft.org/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 cheatmaster.store	2026-02-25 10:24:25 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Sweden Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
Anonymous	2026-02-25 07:11:00 (3 months ago)	Forum/form spam	Web Spam
🇵🇱 sefinek.net	2026-02-25 03:19:47 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from SE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇹🇷 rtbh.com.tr	2026-02-24 20:11:44 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 155.117.127.153

🇸🇪 155.4.245.222

🇰🇷 121.159.71.249

🇮🇳 103.255.10.57

🇮🇩 103.29.185.162

🇻🇳 103.1.210.25

🇧🇬 79.124.62.126

🇩🇪 69.5.169.131

🇺🇸 66.132.186.239

🇬🇧 35.203.211.15

🇩🇪 193.124.20.248

🇫🇷 173.249.52.138

🇺🇸 156.229.163.164

🇩🇪 155.117.127.97

🇺🇸 154.83.197.22

🇺🇸 147.185.132.115

🇺🇸 138.207.254.114

🇮🇳 103.98.37.102

🇸🇬 45.82.78.106

🇺🇸 43.159.177.40