JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.242.224.227

38.242.224.227 was found in our database!

This IP was reported 174 times. Confidence of Abuse is 49%: ?

49%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2940053.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.242.224.227

Whois 38.242.224.227

IP Abuse Reports for 38.242.224.227:

This IP address has been reported a total of 174 times from 78 distinct sources. 38.242.224.227 was first reported on March 20th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 claude CALVET	2026-08-22 15:13:00 (2 days ago)	gee-11 : Blocage de caractères illégaux=>/index%0D%0A%20.php?option=com_jem&amp%5C;view=event&am ... show more gee-11 : Blocage de caractères illégaux=>/index%0D%0A%20.php?option=com_jem&amp%5C;view=event&amp%5C;id=74:animation-astronomie-cine-d%0D%0A%20ebat-pollution-nocturne( ) show less	Hacking
🇵🇱 Budyn	2026-08-18 23:03:43 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.dont-eat-the-pudding.online \| URI: /backup.sql \| UA: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-17 02:08:36 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 38.242.224.227 (FR/F ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 38.242.224.227 (FR/France/Bas-Rhin/Lauterbourg/vmi2940053.contaboserver.net) show less	Bad Web Bot
🇹🇷 neron	2026-08-15 23:06:48 (1 week ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇨🇿 ptlab	2026-08-13 22:45:38 (1 week ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇩🇪 TheDjRider	2026-08-09 09:35:35 (2 weeks ago)	CrowdSec detected Web application attack. Scenario: crowdsecurity/http-bad-user-agent. Automatic ban ... show more CrowdSec detected Web application attack. Scenario: crowdsecurity/http-bad-user-agent. Automatic ban triggered. show less	Web App Attack
🇬🇧 Mendip_Defender	2026-08-07 17:41:24 (2 weeks ago)	38.242.224.227 - - [07/Aug/2026:18:41:29 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 ... show more 38.242.224.227 - - [07/Aug/2026:18:41:29 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-08-02 18:48:39 (3 weeks ago)	38.242.224.227 - - [02/Aug/2026:19:48:42 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 ... show more 38.242.224.227 - - [02/Aug/2026:19:48:42 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇩🇪 4server	2026-08-01 04:29:53 (3 weeks ago)	[SatAug0106:29:47.9502182026][security2:error][pid1046613:tid1046738][client38.242.224.227:0]ModSecu ... show more [SatAug0106:29:47.9502182026][security2:error][pid1046613:tid1046738][client38.242.224.227:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"MJ12bot\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"324\"][id\"333515\"][rev\"4\"][msg\"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)\"][severity\"WARNING\"][tag\"no_ar\"][hostname\"www.royalhosting.ch\"][uri\"/robots.txt\"][unique_id\"am12OxlLhrMQQnTS04LJsAAAANc\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 claude CALVET	2026-07-31 15:17:42 (3 weeks ago)	gew-Joomla User : try to access forms...	Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-07-24 17:46:55 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇬🇧 Interceptor_HQ	2026-07-22 03:31:10 (1 month ago)	request_uri: /robots.txt -- automatic report --	Brute-Force Hacking
🇬🇧 Mendip_Defender	2026-07-20 01:49:49 (1 month ago)	38.242.224.227 - - [20/Jul/2026:02:49:48 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 ... show more 38.242.224.227 - - [20/Jul/2026:02:49:48 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" ... show less	Bad Web Bot
🇩🇪 grassau.com	2026-07-12 11:10:54 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 38.242.224.227 (FR/F ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 38.242.224.227 (FR/France/Bas-Rhin/Lauterbourg/vmi2940053.contaboserver.net) show less	Bad Web Bot
🇸🇬 anotherwatcher	2026-07-09 15:55:58 (1 month ago)	bad bot	Bad Web Bot

Showing 1 to 15 of 174 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c1e::12a

🇨🇦 142.44.225.150

🇺🇸 52.14.240.211

🇨🇦 20.48.163.91

🇲🇽 187.136.9.13

🇺🇸 184.105.247.223

🇨🇱 136.248.242.166

🇬🇧 134.122.106.248

🇯🇵 104.46.209.135

🇨🇦 52.139.44.162

🇺🇸 35.243.157.68

🇺🇸 20.75.92.165

🇮🇳 14.102.12.98

🇵🇱 194.180.48.39

🇧🇷 187.57.131.55

🇸🇬 167.172.79.176

🇨🇳 123.121.102.45

🇹🇯 94.199.23.210

🇷🇺 83.174.219.57

🇺🇸 64.57.129.89