JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.114.122.143

38.114.122.143 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	GLOBALTELEHOST CORP.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63023
Hostname(s)	143-122-114-38.clients.gthost.com
Domain Name	globaltelehost.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.114.122.143

Whois 38.114.122.143

IP Abuse Reports for 38.114.122.143:

This IP address has been reported a total of 38 times from 29 distinct sources. 38.114.122.143 was first reported on July 31st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-10-23 03:00:00 (3 hours ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-10-23 00:07:07 (6 hours ago)	Accessed trap at '/.git/HEAD'	Web App Attack
Anonymous	2026-10-22 23:50:02 (6 hours ago)	Bot / scanning and/or hacking attempts: GET /admin/login HTTP/1.1, GET /.git/HEAD HTTP/1.1	Hacking Web App Attack
Anonymous	2026-10-22 23:45:02 (6 hours ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-10-22 23:16:13 (7 hours ago)	Bot / seems abusive / Apache connections: 45	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 23:09:33 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 38.114.122.143 (143-122-114-38.clients.gthost.c ... show more (mod_security) mod_security (id:210492) triggered by 38.114.122.143 (143-122-114-38.clients.gthost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:09:26.659032 2026] [security2:error] [pid 3946:tid 3946] [client 38.114.122.143:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.marshallcurry.com"] [uri "/.svn/wc.db"] [unique_id "atqXpu3EH4rzZzyY9tcImQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-10-22 23:01:03 (7 hours ago)	[redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_contro ... show more [redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=dom1WDaZsUlE5Y%2F1mq8cpKKRwLwcxoogulvDI%2BFXua4%3D HTTP/1.1" 200 203 0/15967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 80 [redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=B4i0LBWbbjg86izf5RR7iDJz26fTU%2BtcX%2Bxpe7F2aAo%3D HTTP/1.1" 200 203 0/15685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 80 show less	Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-22 22:53:46 (7 hours ago)	Web scan: requests for sensitive files	Web App Attack Bad Web Bot
🇫🇷 Baking333	2026-10-22 22:38:26 (7 hours ago)	[redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_contro ... show more [redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=3VcJsLfsxMSxpoFfIXSw20aTfv8mciGAUr%2FOBv7FjnI%3D HTTP/1.1" 200 203 0/17018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 80 [redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=D3n4U2BvtWkl6JyZHo4JzbGARH4%3D HTTP/1.1" 200 203 0/15066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 80 [redacted] 38.114.122.143 - - [22/Oct/2026:23:38:25 +0100] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=IdovUv%2BefDg39Db%2Fjecunsddlsc%3D HTTP/1.1" 200 203 0/20728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" 80 show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-22 21:38:10 (8 hours ago)	[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 38.114.122.143 - - [22/Oct/2026:23:38:01 +0200] "GET /.git/HEAD HTTP/1.1" 404 7832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 20:45:38 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 38.114.122.143 (143-122-114-38.clients.gthost.c ... show more (mod_security) mod_security (id:210492) triggered by 38.114.122.143 (143-122-114-38.clients.gthost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:45:32.352142 2026] [security2:error] [pid 7473:tid 7473] [client 38.114.122.143:55722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ctrussell.us"] [uri "/.svn/wc.db"] [unique_id "atp17GTyzH9lXCAChuW3fQAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 ipkindonesia-csirt	2026-10-22 20:26:07 (9 hours ago)	Brute-force Exploit Bot	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 18:23:11 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 38.114.122.143 (143-122-114-38.clients.gthost.c ... show more (mod_security) mod_security (id:210492) triggered by 38.114.122.143 (143-122-114-38.clients.gthost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 14:23:08.254983 2026] [security2:error] [pid 27850:tid 27913] [client 38.114.122.143:40196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vintage.deathbyaudio.com"] [uri "/.svn/wc.db"] [unique_id "atpUjImjt04KHuow5N3XwgAAAhA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-10-22 18:23:00 (12 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-10-22 16:48:28 (13 hours ago)	Automatic report - Vulnerability scan /admin/login	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 195.80.150.185

🇳🇱 194.88.98.102

🇺🇸 165.154.172.87

🇷🇴 109.166.129.35

🇺🇸 66.132.224.229

🇧🇷 45.236.117.54

🇺🇸 34.74.35.91

🇺🇸 3.222.85.38

🇹🇼 221.120.1.99

🇬🇧 200.138.46.227

🇨🇳 150.158.13.42

🇺🇸 147.185.132.31

🇵🇰 124.29.214.153

🇨🇳 120.193.9.169

🇭🇰 101.36.108.175

🇮🇷 94.184.35.101

🇺🇸 91.230.168.212

🇳🇱 89.21.67.150

🇩🇪 69.5.169.33

🇲🇾 47.250.52.227