JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.147.106.235

38.147.106.235 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	Fiberstate LLC
Usage Type	Content Delivery Network
ASN	AS26042
Hostname(s)	familiacasillas.com
Domain Name	fiberstate.com
Country	🇺🇸 United States of America
City	Draper, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.147.106.235

Whois 38.147.106.235

IP Abuse Reports for 38.147.106.235:

This IP address has been reported a total of 46 times from 28 distinct sources. 38.147.106.235 was first reported on July 18th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-07-18 16:11:24 (2 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-18 16:02:47 (2 hours ago)	38.147.106.235 - - [18/Jul/2026:18:02:46 +0200] "GET /.env HTTP/1.1" 403 548 "https://www.google.com ... show more 38.147.106.235 - - [18/Jul/2026:18:02:46 +0200] "GET /.env HTTP/1.1" 403 548 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 15:44:48 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 38.147.106.235 (familiacasillas.com): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 38.147.106.235 (familiacasillas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:44:44.962587 2026] [security2:error] [pid 13814:tid 13814] [client 38.147.106.235:55291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "periodpiano.org"] [uri "/.env.staging"] [unique_id "alufbFgi5UK0O3wV98wfFAAAAAE"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-18 15:41:14 (2 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇨🇭 Ribeye375	2026-07-18 15:37:41 (2 hours ago)	HIPS apache-modsecurity - Block tcp/http,https	Web App Attack
🇨🇭 zynex	2026-07-18 15:31:27 (3 hours ago)	URL Probing: /api/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 15:27:27 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 38.147.106.235 (familiacasillas.com): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 38.147.106.235 (familiacasillas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:27:22.276666 2026] [security2:error] [pid 19007:tid 19007] [client 38.147.106.235:65515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-st-kitts-and-nevis.com"] [uri "/.env.backup"] [unique_id "alubWucdNzzzM4DiKUC1wwAAAAY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-07-18 15:15:01 (3 hours ago)	ModSecurity rule 949110 triggered on wp2. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇵🇱 lns.bz	2026-07-18 14:59:22 (3 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇩🇪 big-cloud.nl	2026-07-18 14:55:09 (3 hours ago)	Try to access /storage/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 14:43:59 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 38.147.106.235 (familiacasillas.com): 1 in the ... show more (mod_security) mod_security (id:210492) triggered by 38.147.106.235 (familiacasillas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 10:43:54.968066 2026] [security2:error] [pid 11203:tid 11203] [client 38.147.106.235:54563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pozzolan.org"] [uri "/.env.backup"] [unique_id "aluRKi64jtumD6-TYnqs8wAAAAY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-07-18 14:12:38 (4 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-18 13:58:35 (4 hours ago)	(modsecurity) srv102 ModSecurity 38.147.106.235 (US/United States/familiacasillas.com): 10 in the la ... show more (modsecurity) srv102 ModSecurity 38.147.106.235 (US/United States/familiacasillas.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-07-18 13:54:03 (4 hours ago)	Bot / scanning and/or hacking attempts: GET /api/.env HTTP/1.1, GET /keypair.json HTTP/1.1, GET /.en ... show more Bot / scanning and/or hacking attempts: GET /api/.env HTTP/1.1, GET /keypair.json HTTP/1.1, GET /.env.prod HTTP/1.1, GET /private_keys.txt HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.staging HTTP/1.1, GET /storage/.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /public/.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /wallet.json HTTP/1.1, GET /mnemonic.txt HTTP/1.1, GET /seed.txt HTTP/1.1, GET /keys.json HTTP/1.1, GET /.env HTTP/1.1, GET /.git/config HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 cg-design.co.uk	2026-07-18 13:51:01 (4 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 38.147.106.235 (US/United States/famili ... show more (mod_security) mod_security triggered on hostname [redacted] 38.147.106.235 (US/United States/familiacasillas.com) show less	SQL Injection

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.223.152.97

🇺🇸 147.185.132.96

🇮🇩 139.255.254.163

🇨🇳 101.200.236.207

🇬🇧 35.203.211.27

🇬🇧 35.203.210.189

🇮🇳 27.96.88.123

🇺🇸 20.168.120.101

🇱🇰 220.247.224.226

🇹🇼 198.235.24.68

🇳🇱 176.65.148.216

🇺🇸 162.216.150.150

🇪🇬 156.197.242.30

🇹🇳 102.110.11.36

🇹🇷 94.154.43.243

🇳🇱 45.148.10.200

🇧🇩 45.64.166.105

🇨🇳 36.154.11.229

🇧🇪 34.78.207.34

🇺🇸 34.23.213.224