JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.41.42.133

38.41.42.133 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 36%: ?

36%

ISP	CABLE NORTE C.A.
Usage Type	Fixed Line ISP
ASN	AS271791
Domain Name	norteconecta.net
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Guanare, Portuguesa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.41.42.133

Whois 38.41.42.133

IP Abuse Reports for 38.41.42.133:

This IP address has been reported a total of 33 times from 21 distinct sources. 38.41.42.133 was first reported on June 26th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 11:29:29 (13 hours ago)	(mod_security) mod_security (id:210350) triggered by 38.41.42.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 38.41.42.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:29:21.197307 2026] [security2:error] [pid 4973:tid 4973] [client 38.41.42.133:60346] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|comercialhosting.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "comercialhosting.com"] [uri "/"] [unique_id "aqvPEVWnj17B8BZXP_PVpQAAABg"], referer: https://backlinkrankchecker.online/dir/contextual-seo-backlinks-43417 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-12 17:48:00 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-07 00:16:10 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-05 14:37:39 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-31 02:17:45 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 stechusa	2026-08-28 02:42:33 (2 weeks ago)	[Askari] \| country=VE \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 ove ... show more [Askari] \| country=VE \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 over TLS, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-28 02:42:33 (2 weeks ago)	ELEVATED_THREAT \| country=VE \| ASN=CABLE NORTE CA. \| Facet request during elevated threat (facet_rat ... show more ELEVATED_THREAT \| country=VE \| ASN=CABLE NORTE CA. \| Facet request during elevated threat (facet_ratio=0.94, unique_ips=290) \| 10 IPs targeting /brand/halco-lighting/halco-light-bulbs.html \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 gui-ying233	2026-08-27 11:06:21 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 01:15:02 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-24 12:04:37 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-22 05:25:42 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-08-20 05:50:23 (4 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -70.774 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -70.774 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇮🇹 Progetto1	2026-08-16 21:30:02 (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
Anonymous	2026-08-04 11:17:05 (1 month ago)	[osotir.org] httpd-storefront-action-burst: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir ... show more [osotir.org] httpd-storefront-action-burst: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.log; samples=burst_window=1m \| distinct_ips=17 \| action_types=2 show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-08-01 01:39:49 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2402:1f00:8000:800::34fd

🇰🇷 158.179.164.202

🇫🇮 147.185.133.192

🇷🇴 92.118.39.49

🇺🇸 52.165.91.103

🇫🇷 2001:41d0:33d:9200::40e

🇬🇧 206.189.29.145

🇺🇸 170.187.163.90

🇸🇬 168.107.89.182

🇺🇸 165.227.15.209

🇺🇸 108.51.234.44

🇳🇱 89.248.173.216

🇹🇷 88.236.183.122

🇨🇦 85.217.149.66

🇺🇸 66.132.186.209

🇺🇸 47.251.70.209

🇳🇱 45.148.10.141

🇰🇷 221.156.126.1

🇦🇷 200.59.113.41

🇲🇦 196.75.147.255