JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.141.62.124

38.141.62.124 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 55%: ?

55%

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	cogentco.com
Country	🇺🇸 United States of America
City	Bellwood, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.141.62.124

Whois 38.141.62.124

IP Abuse Reports for 38.141.62.124:

This IP address has been reported a total of 38 times from 11 distinct sources. 38.141.62.124 was first reported on July 25th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-08-30 18:18:14 (1 day ago)	Form spam	Web Spam
🇦🇺 oncord	2026-08-29 13:57:43 (2 days ago)	Form spam	Web Spam
Anonymous	2026-08-29 04:32:16 (3 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-08-28 13:03:38 (3 days ago)	(mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:03:28.715902 2026] [security2:error] [pid 19651:tid 19651] [client 38.141.62.124:56526] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|cwidisplays.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "cwidisplays.com"] [uri "/php/mail.php"] [unique_id "apGHIJoQZmSlwd4YC9c17wAAACc"], referer: http://cwidisplays.com/index2.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Peter Chargen	2026-08-28 05:54:45 (3 days ago)	PHP email form abuse/SPAM attempt	Email Spam
Anonymous	2026-08-27 12:36:08 (4 days ago)	SOHODE WEBFORM SPAM 38.141.62.124 (38.141.62.124)	Web Spam
🇦🇺 oncord	2026-08-27 00:02:02 (5 days ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-08-26 15:20:31 (5 days ago)	(mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:20:26.291478 2026] [security2:error] [pid 17546:tid 17546] [client 38.141.62.124:56143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|digitalmarketing-group.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "digitalmarketing-group.com"] [uri "/scripts/form-1234-9ea1.php"] [unique_id "ao8EOgEBxOhMiCizUawrEgAAAAo"], referer: https://digitalmarketing-group.com/Home.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-08-25 08:00:51 (6 days ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-08-24 18:31:51 (1 week ago)	(mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 14:31:44.427219 2026] [security2:error] [pid 2759:tid 2759] [client 38.141.62.124:55294] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|craftcare.net\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "craftcare.net"] [uri "/mail.php"] [unique_id "aoyOEHdQYf4Ra_D_RfJsmwAAAAY"], referer: http://craftcare.net/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-08-23 21:19:56 (1 week ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-08-23 18:51:15 (1 week ago)	(mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217280) triggered by 38.141.62.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 14:51:09.949089 2026] [security2:error] [pid 30231:tid 30255] [client 38.141.62.124:56409] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|omniuscorp.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "omniuscorp.com"] [uri "/"] [unique_id "aotBHQOZl-BftNvaixtthgAAAJY"], referer: http://omniuscorp.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 France Artisanat	2026-08-22 19:12:55 (1 week ago)	Struggling with website traffic? Try Our 7-Day Free Trial	Web Spam
🇦🇺 oncord	2026-08-22 11:27:04 (1 week ago)	Form spam	Web Spam
🇦🇺 oncord	2026-08-21 10:56:36 (1 week ago)	Form spam	Web Spam

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.127.249.254

🇨🇳 125.92.184.21

🇮🇳 122.176.122.24

🇺🇸 66.240.236.116

🇺🇸 64.62.156.170

🇨🇳 60.172.54.36

🇺🇸 45.194.67.44

🇳🇱 45.148.10.141

🇬🇧 35.203.210.146

🇨🇳 27.150.252.191

🇧🇷 205.210.31.243

🇺🇸 205.210.31.53

🇩🇪 194.88.98.102

🇨🇳 121.22.99.2

🇫🇷 77.192.109.49

🇨🇦 20.104.18.15

🇷🇴 2.57.122.238

🇧🇷 205.210.31.143

🇹🇼 198.235.24.55

🇹🇼 198.235.24.50