JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.234.38.253

109.234.38.253

Recent Activity

12 reports found in our database

63% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Amsterdam, Netherlands

Usage Type

Data Center/Web Hosting/Transit

ASN

AS216071

Domain Name

vdsina.com

Country

🇳🇱 Netherlands

City

Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 109.234.38.253:

This IP address has been reported a total of 12 times from 11 distinct sources. 109.234.38.253 was first reported on August 28th 2026, and the most recent report was 9 hours ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; Spain with 2 reports; United States of America with 2 reports. The most common categories in these recent reports were: Web App Attack 10 times; Brute-Force 5 times; Hacking 5 times; Exploited Host 3 times; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-30 14:39:55 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 109.234.38.253 (rnet.top): 1 in the last 300 se ... show more (mod_security) mod_security (id:210492) triggered by 109.234.38.253 (rnet.top): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 10:39:51.861572 2026] [security2:error] [pid 21254:tid 21281] [client 109.234.38.253:34358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.georgementz.org"] [uri "/wp-config.php.bak"] [unique_id "apRAt2cgh2Bxd9hfwJRx-QAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-08-30 08:45:09 (14 hours ago)	Detected wp_config attack from WP-host.	Hacking Web App Attack
🇺🇸 TAY	2026-08-29 10:37:27 (1 day ago)	109.234.38.253 - - [29/Aug/2026:18:37:16 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Moz ... show more 109.234.38.253 - - [29/Aug/2026:18:37:16 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.234.38.253 - - [29/Aug/2026:18:37:19 +0800] "GET /wp-config.php~ HTTP/1.1" 404 54881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.234.38.253 - - [29/Aug/2026:18:37:21 +0800] "GET /wp-config.php.save HTTP/1.1" 404 54885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.234.38.253 - - [29/Aug/2026:18:37:23 +0800] "GET /wp-config.php.old HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 109.234.38.253 - - [29/Aug/2026:18:37:25 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 54885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Brute-Force
Anonymous	2026-08-29 10:22:15 (1 day ago)	[da.kdns.gr] httpd-config-scan: sites=www.vougioukas-texniki.gr; logs=/var/log/httpd/domains/vougiou ... show more [da.kdns.gr] httpd-config-scan: sites=www.vougioukas-texniki.gr; logs=/var/log/httpd/domains/vougioukas-texniki.gr.log; samples=/wp-config.php.bak \| /wp-config.php~ \| /wp-config.php.save show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-29 08:04:14 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇪🇸 scm	2026-08-28 14:49:17 (2 days ago)		Web App Attack
🇩🇪 hchristo	2026-08-28 13:55:43 (2 days ago)	[Fri Aug 28 15:55:27.863243 2026] [ssl:error] [pid 15898:tid 16212] [client 109.234.38.253:52548] AH ... show more [Fri Aug 28 15:55:27.863243 2026] [ssl:error] [pid 15898:tid 16212] [client 109.234.38.253:52548] AH02032: Hostname www.hchristo.de provided via SNI and hostname mx.hchristo.de provided via HTTP have no compatible SSL setup for policy 'secure' [Fri Aug 28 15:55:30.657061 2026] [ssl:error] [pid 15898:tid 16248] [client 109.234.38.253:52566] AH02032: Hostname www.hchristo.de provided via SNI and hostname mx.hchristo.de provided via HTTP have no compatible SSL setup for policy 'secure' [Fri Aug 28 15:55:32.855668 2026] [ssl:error] [pid 15898:tid 16302] [client 109.234.38.253:52576] AH02032: Hostname www.hchristo.de provided via SNI and hostname mx.hchristo.de provided via HTTP have no compatible SSL setup for policy 'secure' [Fri Aug 28 15:55:39.944365 2026] [ssl:error] [pid 15898:tid 16265] [client 109.234.38.253:57568] AH02032: Hostname www.hchristo.de provided via SNI and hostname mx.hchristo.de provided via HTTP have no compatible SSL setup for policy 'secure' [Fri Aug 28 15:55:42.509 ... show less	Brute-Force
Anonymous	2026-08-28 13:21:02 (2 days ago)	Malicious activity detected	Hacking Web App Attack
🇪🇸 alferez	2026-08-28 12:52:38 (2 days ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇩🇪 FeG Deutschland	2026-08-28 05:05:23 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇫🇷 Security_Whaller	2026-08-28 04:39:27 (2 days ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
🇸🇪 vaia.cloud	2026-08-28 03:35:02 (2 days ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.41.47

🇬🇧 161.35.34.21

🇨🇳 118.250.50.56

🇲🇦 196.75.167.50

🇺🇿 195.158.16.60

🇺🇸 143.42.1.44

🇹🇭 134.236.236.38

🇫🇷 85.217.140.24

🇧🇪 198.235.24.129

🇦🇷 181.46.57.196

🇮🇳 168.144.77.101

🇺🇸 104.143.77.9

🇺🇸 98.197.68.93

🇮🇹 57.131.32.79

🇳🇱 45.148.10.152

🇺🇸 44.220.188.50

🇺🇸 18.209.137.234

100.98.201.56

🇮🇳 49.248.197.50

🇳🇱 45.148.10.157