JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.180.136.241

38.180.136.241 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 80%: ?

80%

ISP	3NT SOLUTIONS LLP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58061
Domain Name	3nt.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.180.136.241

Whois 38.180.136.241

IP Abuse Reports for 38.180.136.241:

This IP address has been reported a total of 21 times from 15 distinct sources. 38.180.136.241 was first reported on July 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-07-18 17:32:38 (1 day ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 TPI-Abuse	2026-07-18 17:24:18 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 38.180.136.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.180.136.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 13:24:14.098320 2026] [security2:error] [pid 466146:tid 466146] [client 38.180.136.241:62139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web.cruisingforsex.com"] [uri "/.env"] [unique_id "alu2vuTZ0c7Ebu5raW7L2AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 16:49:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 38.180.136.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.180.136.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 12:49:37.000226 2026] [security2:error] [pid 9315:tid 9315] [client 38.180.136.241:52449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.env"] [unique_id "aluuoI8vO9IC06Tsg8N-LQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 16:33:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 38.180.136.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.180.136.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 12:33:17.346752 2026] [security2:error] [pid 955718:tid 955718] [client 38.180.136.241:56606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.televisonic.com"] [uri "/.env"] [unique_id "aluqzQ3xen-J8w5ZC8T1aQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 kranem	2026-07-18 15:00:03 (1 day ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 58061 (Scalaxy B.V.) Protocol: HTTP/1.1 ( ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 58061 (Scalaxy B.V.) Protocol: HTTP/1.1 (GET method) Endpoint: /.env Timestamp: 2026-07-18T14:52:41Z User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Bad Web Bot
Anonymous	2026-07-18 06:37:33 (2 days ago)	[18/Jul/2026:09:37:30 +0300] 178435665055.077540 38.180.136.241 57410 148.251.76.218 80 [18/Jul/2026 ... show more [18/Jul/2026:09:37:30 +0300] 178435665055.077540 38.180.136.241 57410 148.251.76.218 80 [18/Jul/2026:09:37:32 +0300] 178435665227.603703 38.180.136.241 57416 148.251.76.218 443 show less	Web App Attack
🇨🇦 polycoda	2026-07-18 04:36:10 (2 days ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇮🇩 penjaga BRIN	2026-07-18 01:08:48 (2 days ago)	Suspicious malicious activity	Hacking
🇮🇩 sockominfo	2026-07-17 23:00:52 (2 days ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-17 22:00:09 (2 days ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 6.4/10 (MEDIUM). Reported by ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 6.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇧🇪 voormedia	2026-07-17 21:34:30 (2 days ago)	Accessed trap at '/.env'	Web App Attack
🇩🇪 MusicLibrary	2026-07-17 17:17:27 (2 days ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-17 09:15:41 (2 days ago)	[redacted] 38.180.136.241 - - [17/Jul/2026:10:15:38 +0100] "GET /[redacted] HTTP/1.1" 302 1568 0/620 ... show more [redacted] 38.180.136.241 - - [17/Jul/2026:10:15:38 +0100] "GET /[redacted] HTTP/1.1" 302 1568 0/62076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" [redacted] 38.180.136.241 - - [17/Jul/2026:10:15:39 +0100] "GET /[redacted] HTTP/1.1" 302 1567 0/69466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-17 06:39:26 (3 days ago)	[redacted] 38.180.136.241 - - [17/Jul/2026:07:39:23 +0100] "GET /[redacted] HTTP/1.1" 302 1563 0/678 ... show more [redacted] 38.180.136.241 - - [17/Jul/2026:07:39:23 +0100] "GET /[redacted] HTTP/1.1" 302 1563 0/67834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" [redacted] 38.180.136.241 - - [17/Jul/2026:07:39:23 +0100] "GET /[redacted] HTTP/1.1" 302 1562 0/57196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-15 23:44:01 (4 days ago)	20 attempts against mh-misbehave-ban on ceres	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 118.100.168.234

🇫🇷 91.196.152.199

🇺🇸 74.82.47.3

🇺🇸 70.118.29.34

🇯🇵 8.216.7.189

🇬🇧 5.252.83.133

🇳🇱 195.178.110.217

🇺🇿 185.191.141.115

🇷🇸 185.119.90.26

🇦🇷 181.228.67.146

🇩🇪 167.94.145.30

🇱🇹 62.60.130.219

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇬🇧 35.203.210.43

🇧🇪 34.22.202.30

🇺🇸 2a09:bac1:7680:460::5e:6a

🇺🇸 195.184.76.137

🇵🇱 176.53.159.197

🇸🇬 114.119.143.114