JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.191.161.238

38.191.161.238 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	Three Networks S.R.L
Usage Type	Fixed Line ISP
ASN	AS273180
Domain Name	threenetworks.net
Country	🇩🇴 Dominican Republic
City	Santo Domingo, Nacional

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.191.161.238

Whois 38.191.161.238

IP Abuse Reports for 38.191.161.238:

This IP address has been reported a total of 11 times from 10 distinct sources. 38.191.161.238 was first reported on October 7th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Shaik Sai Meera	2025-11-19 00:05:12 (7 months ago)	IM360 WAF: Block Drupal/Joomla spammers	Brute-Force Bad Web Bot
🇮🇩 hermawan	2025-11-18 22:19:46 (7 months ago)	[Wed Nov 19 05:17:44.426432 2025] [security2:error] [pid 244810:tid 139672873334464] [client 38.191. ... show more [Wed Nov 19 05:17:44.426432 2025] [security2:error] [pid 244810:tid 139672873334464] [client 38.191.161.238:60236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 request_line = GET /index.php/prakiraan-bulanan/3872-prakiraan-potensi-banjir/prakiraan-daerah-potensi-banjir-di-indonesia/prakiraan-daerah-potensi-banjir-di-indonesia-tahun-2018/555556391-prakiraan-daerah-potensi-banjir-di-indonesia-bulan-maret-tahun-2018-update-dari-analisis-tanggal-10-nopember-2017 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/3872-prakiraan-potensi-banjir/prakiraan ... show less	Hacking Web App Attack
🇬🇧 Silly Development	2025-11-17 11:25:51 (7 months ago)	Malicious activity detected from 273180 THREE NETWORKS SRL towards host sillydev.co.uk (GET HTTP/2) ... show more Malicious activity detected from 273180 THREE NETWORKS SRL towards host sillydev.co.uk (GET HTTP/2) @ 2025-11-17T11:25:51Z (21 occurrences) show less	DDoS Attack Exploited Host
🇵🇱 sefinek.net	2025-11-15 09:40:33 (7 months ago)	Triggered Cloudflare WAF (l7ddos) from DO. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from DO. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 03:28:34 (7 months ago)	ASN: 273180 (THREE NETWORKS SRL) Botnet Zombie: This IP has been detected as a botnet zombie \| Outb ... show more ASN: 273180 (THREE NETWORKS SRL) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 01:34:55 (7 months ago)	ASN: 273180 (THREE NETWORKS SRL) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbo ... show more ASN: 273180 (THREE NETWORKS SRL) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
Anonymous	2025-11-02 11:20:00 (7 months ago)	DDoS Attack	DDoS Attack
🇨🇭 backslash	2025-10-18 08:14:23 (8 months ago)		DDoS Attack
🇪🇸 el-brujo	2025-10-17 10:22:27 (8 months ago)	Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Wind ... show more Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: THREE NETWORKS SRL Country: DO Method: GET Timestamp: 2025-10-17T10:22:27Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇭 🇨🇭 Hosting	2025-10-11 09:42:00 (8 months ago)	Used in participation of a (D)DoS attack	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-10-07 18:14:29 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c03::129

🇹🇭 114.131.130.11

🇮🇩 103.168.135.187

🇺🇸 64.94.153.241

🇬🇧 35.203.211.117

🇬🇧 35.203.211.8

🇸🇬 2404:6800:4003:c03::127

🇨🇴 190.5.200.98

🇬🇧 185.249.74.198

🇵🇱 176.53.159.198

🇭🇰 104.208.105.88

🇨🇳 101.96.200.79

🇳🇱 45.153.34.151

🇩🇪 194.5.65.206

🇨🇴 186.147.162.215

🇺🇸 147.185.132.219

🇵🇱 109.205.211.91

🇨🇦 104.254.90.187

🇮🇩 103.67.244.133

🇷🇴 80.94.92.179