JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.134.41.34

38.134.41.34 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 41%: ?

41%

ISP	Snaju Development
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399646
Domain Name	snaju.com
Country	🇺🇸 United States of America
City	Spring, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.134.41.34

Whois 38.134.41.34

IP Abuse Reports for 38.134.41.34:

This IP address has been reported a total of 39 times from 21 distinct sources. 38.134.41.34 was first reported on January 30th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-17 14:31:29 (2 days ago)	ICS Labs identified 38.134.41.34 as a malicious indicator from threat intelligence.	Hacking
🇺🇸 TPI-Abuse	2026-06-29 05:19:21 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 01:19:14.372532 2026] [security2:error] [pid 23534:tid 23534] [client 38.134.41.34:39938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "creertest.com.creartest.com"] [uri "/.git/config"] [unique_id "akIAUkzg2OTo2GtlLYfAgAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-06-29 03:37:23 (2 weeks ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-06-28 22:01:47 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-06-28	Web App Attack SSH Hacking
🇦🇺 oncord	2026-06-28 15:32:45 (3 weeks ago)	Form spam	Web Spam
🇩🇪 ger-stg-sifi1	2026-06-28 05:26:37 (3 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 07:45:24 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:45:16.407651 2026] [security2:error] [pid 20347:tid 20347] [client 38.134.41.34:44146] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kawkacevents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kawkacevents.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj9_jMupV-VGJdUwcIlrMAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-06-25 19:05:29 (3 weeks ago)	[SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\| ... show more [SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\|union%20\|SELECT%20\|select%20).* HTTP/1.1$ show less	SQL Injection
🇳🇱 homeshowdomain.nl	2026-06-24 21:59:35 (3 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-23. show less	Web App Attack SSH Hacking
🇺🇸 xmission.com	2026-06-18 03:28:20 (1 month ago)	Blocked by UFW (TCP on 9001) Source port: 35820 TTL: 53 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9001) Source port: 35820 TTL: 53 Packet length: 52 TOS: 0x08 This report (for 38.134.41.34) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-13 02:08:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 22:08:30.110970 2026] [security2:error] [pid 10019:tid 10019] [client 38.134.41.34:40740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.spiritofacorn.com"] [uri "/.git/config"] [unique_id "aiy7nl4IZYHwOs2BVkX_eQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 sailor	2026-06-12 13:48:00 (1 month ago)	Part of a botnet attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 06:33:36 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 38.134.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 02:33:29.382758 2026] [security2:error] [pid 30372:tid 30389] [client 38.134.41.34:54654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.isa-energy.net"] [uri "/.git/config"] [unique_id "aiUQuYZ-ZoUPw8Rt5fDg9wAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-02 21:06:13 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇩🇪 LRob	2026-05-27 11:30:08 (1 month ago)	Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ... show more Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail show less	Brute-Force Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 67.219.110.181

🇪🇸 45.92.87.118

🇺🇸 2a04:4e40:e040:0:5df:b64d:487d:75ac

🇪🇸 196.196.150.5

🇵🇰 157.10.30.202

🇺🇸 144.225.8.54

🇮🇳 110.227.211.82

🇺🇸 107.211.37.253

🇳🇱 45.148.10.157

🇮🇳 20.204.14.100

🇧🇷 179.34.71.233

🇹🇷 176.91.129.77

🇮🇶 169.224.35.156

🇧🇩 103.14.72.154

🇨🇳 1.83.125.202

🇺🇸 170.39.184.167

🇻🇳 113.160.184.143

🇿🇦 102.64.33.209

🇫🇷 85.217.140.28

🇫🇮 65.109.156.158