JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.147.161.92

38.147.161.92 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 24%: ?

24%

ISP	XNNET LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS967
Domain Name	xn.net
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.147.161.92

Whois 38.147.161.92

IP Abuse Reports for 38.147.161.92:

This IP address has been reported a total of 26 times from 8 distinct sources. 38.147.161.92 was first reported on October 10th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 john doe	2026-07-23 21:01:43 (2 days ago)	SentinelBot: Spring Boot Exploit (score: 70)	Web App Attack
🇩🇪 eryilmaz	2026-07-23 17:59:14 (2 days ago)	eryilmaz WAF/fail2ban: 2 saldırı olayı (waf.autoban) son 30 gün, ör. /.env.production	Web App Attack Hacking
🇩🇪 tikket	2026-07-23 09:07:28 (2 days ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇩🇪 mravb	2026-07-22 09:22:35 (3 days ago)	38.147.161.92 - - [22/Jul/2026:12:22:34 +0300] "GET /.env HTTP/1.1" 404 143 "-" "Mozilla/5.0" ...	Web App Attack Hacking
🇩🇪 tikket	2026-07-16 09:10:39 (1 week ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇩🇪 tikket	2026-07-08 09:10:54 (2 weeks ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇩🇪 tikket	2026-07-06 21:15:49 (2 weeks ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇩🇪 tikket	2026-07-01 09:09:33 (3 weeks ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇩🇪 mravb	2026-06-25 21:09:07 (1 month ago)	38.147.161.92 - - [26/Jun/2026:00:09:06 +0300] "GET /.env HTTP/1.1" 404 143 "-" "Mozilla/5.0" ...	Web App Attack Hacking
🇩🇪 mravb	2026-06-17 21:12:24 (1 month ago)	38.147.161.92 - - [18/Jun/2026:00:12:23 +0300] "GET /.env HTTP/1.1" 404 143 "-" "Mozilla/5.0" ...	Web App Attack Hacking
🇩🇪 mravb	2026-06-10 21:10:24 (1 month ago)	38.147.161.92 - - [11/Jun/2026:00:10:24 +0300] "GET /.env HTTP/1.1" 404 143 "-" "Mozilla/5.0" ...	Web App Attack Hacking
🇩🇪 manuelisus	2026-05-30 09:07:25 (1 month ago)	Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +20: http_no_user_agent, +30: ... show more Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +20: http_no_user_agent, +30: trap_fake_file_.env, +60: repeat_visitor_50plus show less	Web App Attack Hacking
🇩🇪 manuelisus	2026-05-28 09:07:20 (1 month ago)	Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +20: http_no_user_agent, +30: ... show more Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +20: http_no_user_agent, +30: trap_fake_file_.env, +60: repeat_visitor_50plus show less	Web App Attack Hacking
🇵🇰 sbk97 (https://sayor.net)	2026-05-28 09:07:15 (1 month ago)	HTTP attacks observed: GET /.env HTTP/1.1 \| status=403 \|\| GET /.env.local HTTP/1.1 \| status=404 \|\| G ... show more HTTP attacks observed: GET /.env HTTP/1.1 \| status=403 \|\| GET /.env.local HTTP/1.1 \| status=404 \|\| GET /.env.production HTTP/1.1 \| status=404 \|\| GET /.env.development HTTP/1.1 \| status=404 \|\| GET /env.json HTTP/1.1 \| status=404 \|\| GET /debug HTTP/1.1 \| status=404 \|\| GET /.env HTTP/1.1 \| status=403 \|\| GET /.env.local HTTP/1.1 \| status=404 \|\| GET /.env.production HTTP/1.1 \| status=404 \|\| GET /.env.development HTTP/1.1 \| status=404 \|\| GET /env.json HTTP/1.1 \| status=404 \|\| GET /debug HTTP/1.1 \| status=404 \|\| GET /.env HTTP/1.1 \| status=403 \|\| GET /.env.local HTTP/1.1 \| status=404 \|\| GET /.env.production HTTP/1.1 \| status=404 \|\| GET /.env.development HTTP/1.1 \| status=404 \|\| GET /env.json HTTP/1.1 \| status=404 \|\| GET /debug HTTP/1.1 \| status=404 \|\| GET /.env HTTP/1.1 \| status=403 \|\| GET /.env.local HTTP/1.1 \| status=404 \|\| GET /.env.production HTTP/1.1 \| status=404 \|\| GET /.env.development HTTP/1.1 \| status=404 \|\| GET /env.json HTTP/1.1 \| status=404 \|\| GET /debug HTTP/1.1 \| status=404 \|\| GET /.env HTTP/1.1 \| stat show less	Brute-Force
🇩🇪 manuelisus	2026-05-26 09:08:35 (1 month ago)	Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +20: http_no_user_agent, +30: ... show more Honeypot HTTP: +10: honeypot_connection, +15: short_automated_session, +20: http_no_user_agent, +30: trap_fake_file_.env, +60: repeat_visitor_50plus show less	Web App Attack Hacking

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400c:c15::12a

🇺🇸 216.73.217.151

🇺🇸 205.210.31.44

🇲🇾 183.171.41.89

🇳🇱 91.92.42.36

🇷🇺 213.141.130.251

🇺🇸 205.210.31.43

🇺🇸 205.210.31.39

🇰🇪 197.248.8.33

🇫🇷 194.113.235.89

🇦🇴 193.163.125.40

🇧🇷 191.7.26.153

🇲🇾 183.171.41.134

🇺🇸 147.185.132.134

🇨🇳 120.133.60.156

🇲🇾 117.53.155.126

🇫🇷 91.231.89.190

🇷🇺 91.185.75.244

🇺🇸 54.214.129.203

🇧🇷 205.210.31.254