JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.242.233.72

38.242.233.72

Neutral Activity

20 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Hostname(s)

open4net.net

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

38.242.233.72 has been reported 20 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 38.242.233.72:

This IP address has been reported a total of 20 times from 13 distinct sources. 38.242.233.72 was first reported on July 17th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-07-26 11:40:35 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 26 07:40:27.314041 2024] [security2:error] [pid 12238:tid 12238] [client 38.242.233.72:52402] [client 38.242.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legendcp.org"] [uri "/.env"] [unique_id "ZqOLK-EwzKkZFuvuMCBvkgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-26 10:09:46 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 26 06:09:40.131587 2024] [security2:error] [pid 1289520:tid 1289520] [client 38.242.233.72:46610] [client 38.242.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tinkerlabyrinth.com"] [uri "/.env"] [unique_id "ZqN15DH-X1d5soBIkcstOwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 ITShelter Security	2024-07-26 04:44:31 (2 years ago)	Restricted File Access Attempt 2024/07/26 07:44:31 +03:00 req: GET /.env HTTP/1.1, host: *.ru 2024 ... show more Restricted File Access Attempt 2024/07/26 07:44:31 +03:00 req: GET /.env HTTP/1.1, host: .ru 2024/07/26 07:44:44 +03:00 req: GET /.env HTTP/1.1, host: **.pro show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-26 00:40:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 25 20:39:55.891588 2024] [security2:error] [pid 22955:tid 23036] [client 38.242.233.72:58992] [client 38.242.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.135"] [uri "/.env"] [unique_id "ZqLwW2-e0uimijaP4S04jgAAAdY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-25 20:44:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 25 16:43:55.706659 2024] [security2:error] [pid 26897:tid 26897] [client 38.242.233.72:59704] [client 38.242.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stricklinranch.com"] [uri "/.env"] [unique_id "ZqK5C-rJbucsO8b_XnRVsAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hydra-Shield.fr	2024-07-25 19:28:48 (2 years ago)	Directory Traversal on: /.env	Web App Attack
🇬🇧 openstrike.co.uk	2024-07-19 05:12:30 (2 years ago)	17 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
🇫🇷 LRNP	2024-07-19 02:24:26 (2 years ago)	_:443 38.242.233.72 - - [19/Jul/2024:02:24:26 +0000] "GET /.env HTTP/1.1" 404 118 "-" "python-reques ... show more _:443 38.242.233.72 - - [19/Jul/2024:02:24:26 +0000] "GET /.env HTTP/1.1" 404 118 "-" "python-requests/2.22.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2024-07-18 23:27:44 (2 years ago)	Web APP Attack	Web App Attack
🇨🇭 backslash	2024-07-18 18:00:01 (2 years ago)	block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6	Bad Web Bot
🇩🇪 Hydra-Shield.fr	2024-07-18 15:50:35 (2 years ago)	Directory Traversal on: /.env	Web App Attack
🇺🇸 Shouddy Tarano	2024-07-18 14:22:08 (2 years ago)	[Thu Jul 18 14:22:02.358909 2024] [authz_core:error] [pid 1826629:tid 140523411076864] [client 38.24 ... show more [Thu Jul 18 14:22:02.358909 2024] [authz_core:error] [pid 1826629:tid 140523411076864] [client 38.242.233.72:41016] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/.env [Thu Jul 18 14:22:02.900026 2024] [authz_core:error] [pid 1826381:tid 140523234895616] [client 38.242.233.72:41032] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/ [Thu Jul 18 14:22:02.901512 2024] [authz_core:error] [pid 1826381:tid 140523234895616] [client 38.242.233.72:41032] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html [Thu Jul 18 14:22:06.105779 2024] [authz_core:error] [pid 1826629:tid 140523360720640] [client 38.242.233.72:41174] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/.env [Thu Jul 18 14:22:06.585405 2024] [authz_core:error] [pid 1826382:tid 140523536901888] [client 38.242.233.72:41192] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/ ... show less	DDoS Attack Web Spam Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-18 12:28:04 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 18 08:27:58.948603 2024] [security2:error] [pid 6096:tid 6096] [client 38.242.233.72:51088] [client 38.242.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.happybookermusic.com"] [uri "/.env"] [unique_id "ZpkKTg9lbywsZbGK5Gbf5AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gumbysoft	2024-07-18 12:11:52 (2 years ago)	Unauthorized web vulnerability scan (/.env, wordpress, etc.)	Web App Attack
🇺🇸 TPI-Abuse	2024-07-18 12:07:31 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 38.242.233.72 (vmi1964141.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 18 08:07:24.494461 2024] [security2:error] [pid 5049:tid 5049] [client 38.242.233.72:40838] [client 38.242.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perlcreative.com"] [uri "/.env"] [unique_id "ZpkFfNsFCzrkDCaFKDWrEAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.203

🇧🇷 179.48.18.42

🇺🇸 164.92.69.112

🇯🇵 49.212.156.173

🇳🇱 176.65.148.226

🇺🇸 164.92.65.101

🇧🇬 109.160.32.155

🇩🇪 91.239.130.203

🇳🇱 89.42.231.200

🇩🇪 69.5.169.147

🇺🇸 66.132.186.222

🇰🇷 59.5.108.192

🇩🇪 57.131.129.97

🇸🇬 47.128.52.139

🇧🇷 200.149.213.242

🇧🇪 198.235.24.180

🇧🇷 191.210.133.134

🇧🇷 190.89.55.250

🇸🇪 185.217.0.181

🇺🇸 185.180.141.42