This IP address has been reported a total of
76
times from
44 distinct
sources.
38.41.2.235 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 17
reports;
Germany
with 2
reports;
Russian Federation
with 2
reports.
The most common categories in these recent reports were:
Bad Web Bot
17
times;
Web App Attack
6
times;
DDoS Attack
5
times;
Hacking
5
times;
Port Scan
4
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ...
show moreKingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (60, Abuse: 51)
show less
2026-10-21T00:04:02 38.41.2.235 GET /Photos/Family/2014-10-05%20Jessica%20Baby%20Shower/raw/IMG_9348 ...
show more2026-10-21T00:04:02 38.41.2.235 GET /Photos/Family/2014-10-05%20Jessica%20Baby%20Shower/raw/IMG_9348.CR2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
...
show less
Blocked by OPNsense; 38 hits, proto=udp, ports=10258,11997,12816,13618,14423,14693,18307,18652,18658 ...
show moreBlocked by OPNsense; 38 hits, proto=udp, ports=10258,11997,12816,13618,14423,14693,18307,18652,18658,20342,
show less
nfdump top talker: 38.41.2.235 | first seen 2026-10-12 20:56:41.088 | duration 00:00:00.055 | flows= ...
show morenfdump top talker: 38.41.2.235 | first seen 2026-10-12 20:56:41.088 | duration 00:00:00.055 | flows=1 | packets=24552 | bytes=18.0 M | pps=444 | bps=2.6 M | bpp=731 | proto=udp
show less
Web vulnerability scanning / probing from 38.41.2.235: automated requests for CMS admin paths, login ...
show moreWeb vulnerability scanning / probing from 38.41.2.235: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /Forums/General-Discussion/General-Discussion?amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Border=Replies&%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Border=Topic&page=1&%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bsort=asc.
show less
HTTP application-layer DoS / botnet traffic from 38.41.2.235: repeated high-cost dynamic page and fe ...
show moreHTTP application-layer DoS / botnet traffic from 38.41.2.235: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Anonymous
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show moreLarge-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/11016/form_key/A6QDDVvOfwyDQZAN/ | UA: Mozilla/5.0 (Macintosh; PPC Mac OS X 10_6_0; rv:1.9.2.20) Gecko/2413-08-27 03:46:09.682711 Firefox/3.6.4 | (Magento Site)
show less
Repeated requests classified as pathological web bot behavior, for example: /user_avatar/[redacted]/ ...
show moreRepeated requests classified as pathological web bot behavior, for example: /user_avatar/[redacted]/24/7880_2.png (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36")
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ...
show moreMozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
