JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.253.224.18

38.253.224.18 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 100%: ?

100%

ISP	JUJUNG.ID (PT. Yetoya Solusi Indonesia)
Usage Type	Fixed Line ISP
ASN	AS139952
Domain Name	yetoya.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.253.224.18

Whois 38.253.224.18

IP Abuse Reports for 38.253.224.18:

This IP address has been reported a total of 112 times from 61 distinct sources. 38.253.224.18 was first reported on July 6th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-24 06:43:17 (3 hours ago)	38.253.224.18 - - [24/Jul/2026:08:43:14 +0200] "GET /wp-config.php_ HTTP/1.1" 403 5502 "-" "Mozilla/ ... show more 38.253.224.18 - - [24/Jul/2026:08:43:14 +0200] "GET /wp-config.php_ HTTP/1.1" 403 5502 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ufn.edu.br	2026-07-24 05:33:28 (4 hours ago)	[Fri Jul 24 02:31:36.441731 2026] [access_compat:error] [pid 26936] [client 38.253.224.18:63065] AH0 ... show more [Fri Jul 24 02:31:36.441731 2026] [access_compat:error] [pid 26936] [client 38.253.224.18:63065] AH01797: client denied by server configuration: /var/www/html/wp-config.php [Fri Jul 24 02:33:25.473949 2026] [access_compat:error] [pid 10425] [client 38.253.224.18:50701] AH01797: client denied by server configuration: /var/www/html/phpinfo.php [Fri Jul 24 02:33:27.329579 2026] [access_compat:error] [pid 26936] [client 38.253.224.18:51010] AH01797: client denied by server configuration: /var/www/html/info.php ... show less	Exploited Host Web App Attack
🇩🇪 netclix.gr	2026-07-23 23:16:53 (11 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 38.253.224.18 (ID/Indonesia/-): (CF_EN ... show more (mod_security) mod_security triggered on hostname [redacted] 38.253.224.18 (ID/Indonesia/-): (CF_ENABLE) show less	SQL Injection
🇮🇩 Burayot	2026-07-23 06:27:43 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 38.253.224.18 (ID/Indonesia/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 38.253.224.18 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
🇦🇺 nzhost.co.nz	2026-07-23 06:10:01 (1 day ago)	$f2bV_matches	Hacking Brute-Force
🇮🇩 Burayot	2026-07-23 05:41:42 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 38.253.224.18 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 38.253.224.18 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇱 spd.co.il	2026-07-23 02:02:37 (1 day ago)	Web application attack detected	Hacking Web App Attack
🇦🇺 user-01	2026-07-23 02:02:04 (1 day ago)	Multiple WAF violations	Web App Attack
🇪🇸 masterguru	2026-07-22 18:43:39 (1 day ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇸🇪 vaia.cloud	2026-07-22 10:40:02 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇭🇺 True_Vlad_Dracul	2026-07-22 07:59:00 (2 days ago)	WAF Multiple Hits	Web App Attack
🇨🇱 SinaiCL	2026-07-22 03:55:13 (2 days ago)	WAF Multiple Hits	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-21 02:57:08 (3 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 38.253.224.18 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 38.253.224.18 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 Savvii	2026-07-21 01:55:14 (3 days ago)	20 attempts against mh-misbehave-ban on eris	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 00:20:15 (3 days ago)	38.253.224.18 - - [21/Jul/2026:02:17:52 +0200] "GET /_wpeprivate/config.json HTTP/1.1" 404 6404 "-" ... show more 38.253.224.18 - - [21/Jul/2026:02:17:52 +0200] "GET /_wpeprivate/config.json HTTP/1.1" 404 6404 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 38.253.224.18 - - [21/Jul/2026:02:17:53 +0200] "GET /wp-config.php_ HTTP/1.1" 403 6407 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 38.253.224.18 - - [21/Jul/2026:02:17:56 +0200] "GET /.wp-config.php.swo HTTP/1.1" 404 6404 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7) AppleWebKit/534.48.3 (KHTML, like Gecko) Version/5.1 Safari/534.48.3" 38.253.224.18 - - [21/Jul/2026:02:17:55 +0200] "GET /wp-config.php~ HTTP/1.1" 403 6407 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36" 38.253.224.18 - - [21/Jul/2026:02:17:54 +0200] "GET /wp-config.php HTTP/1.1" 403 6407 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; NISSC; rv:11.0) li ... show less	DDoS Attack

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 194.156.249.154

🇨🇦 191.96.36.61

🇧🇷 187.120.28.117

🇫🇷 185.177.72.67

🇺🇸 162.216.149.134

🇺🇸 162.216.149.5

🇺🇸 138.197.24.249

🇬🇧 134.209.177.41

🇰🇷 118.39.219.45

🇮🇩 103.82.93.80

🇺🇸 66.132.195.122

🇺🇸 54.212.76.63

🇫🇷 54.37.10.124

🇫🇷 45.8.133.111

🇺🇸 2600:3c03::2000:5bff:fe4a:d748

🇩🇪 167.94.146.57

🇬🇧 35.203.210.11

🇺🇸 2a00:1450:4864:20::52c

🇺🇸 209.112.91.75

🇷🇺 178.178.222.59