JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.124.80.238

40.124.80.238 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 85%: ?

85%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.124.80.238

Whois 40.124.80.238

IP Abuse Reports for 40.124.80.238:

This IP address has been reported a total of 30 times from 15 distinct sources. 40.124.80.238 was first reported on October 15th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-16 20:23:19 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:23:14.763237 2026] [security2:error] [pid 18295:tid 18295] [client 40.124.80.238:51920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikini.com"] [uri "/.env"] [unique_id "atKHstKTdLmWiowIYPrsmgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-16 19:41:35 (5 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 19:07:39 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 15:07:33.655812 2026] [security2:error] [pid 1953:tid 1953] [client 40.124.80.238:62513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morninginc.com"] [uri "/.env"] [unique_id "atJ19Y0lGW6gPhKkEH8PJgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 18:32:36 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 14:32:30.280310 2026] [security2:error] [pid 8250:tid 8250] [client 40.124.80.238:52880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kalvanna.com"] [uri "/.env"] [unique_id "atJtvg-97j4xIo0ZQZAQ4gAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-16 17:46:14 (7 hours ago)	40.124.80.238 - - [16/Oct/2026:12:45:23 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Window ... show more 40.124.80.238 - - [16/Oct/2026:12:45:23 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 172.71.170.169 40.124.80.238 - - [16/Oct/2026:12:45:23 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 172.71.170.169 40.124.80.238 - - [16/Oct/2026:12:45:24 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 172.71.170.169 40.124.80.238 - - [16/Oct/2026:12:45:24 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 172.71.170.169 40.124.80.238 - - [16/Oct/2026:12:45:24 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 17:43:56 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:43:49.476989 2026] [security2:error] [pid 27172:tid 27172] [client 40.124.80.238:53580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firstunitedreserve.com"] [uri "/.env"] [unique_id "atJiVWVv8fHSjGsNxgOMHAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-10-16 17:37:28 (7 hours ago)	[16/Oct/2026:13:37:27.237170 --0400] atJg1zN2ZAz3v0zL@II@pwAAANc 40.124.80.238 43300 205.233.18.17 7 ... show more [16/Oct/2026:13:37:27.237170 --0400] atJg1zN2ZAz3v0zL@II@pwAAANc 40.124.80.238 43300 205.233.18.17 7081 [16/Oct/2026:13:37:27.586363 --0400] atJg17dLhVk8Xk6QC1PXvQAAAQc 40.124.80.238 58424 205.233.18.17 7081 [16/Oct/2026:13:37:27.946389 --0400] atJg1yl7BPz80q4Oh@-0jAAAAUI 40.124.80.238 58438 205.233.18.17 7081 [16/Oct/2026:13:37:28.247195 --0400] atJg2LdLhVk8Xk6QC1PXvgAAAQY 40.124.80.238 58452 205.233.18.17 7081 [16/Oct/2026:13:37:28.732196 --0400] atJg2DN2ZAz3v0zL@II@qAAAAM4 40.124.80.238 58468 205.233.18.17 7081 ... show less	Hacking
🇺🇸 TPI-Abuse	2026-10-16 17:23:16 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:23:08.572395 2026] [security2:error] [pid 12873:tid 12873] [client 40.124.80.238:57697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudleyanddudley.com"] [uri "/.env"] [unique_id "atJdfKe0JJUULiNdULDCKAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-10-16 17:20:36 (7 hours ago)	40.124.80.238 - - [16/Oct/2026:13:20:28 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Window ... show more 40.124.80.238 - - [16/Oct/2026:13:20:28 -0400] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 40.124.80.238 - - [16/Oct/2026:13:20:28 -0400] "GET /.env HTTP/1.1" 404 25752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 40.124.80.238 - - [16/Oct/2026:13:20:35 -0400] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-10-16 17:09:23 (7 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 17:04:16 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:04:08.578172 2026] [security2:error] [pid 25234:tid 25234] [client 40.124.80.238:58899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cvtheory.com"] [uri "/.env"] [unique_id "atJZCIUpOf3O98PagM2z0QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-10-16 16:49:18 (8 hours ago)	40.124.80.238 - - [16/Oct/2026:12:49:17 -0400] "GET /.env HTTP/1.1" 404 1247 "-" "Mozilla/5.0 (Windo ... show more 40.124.80.238 - - [16/Oct/2026:12:49:17 -0400] "GET /.env HTTP/1.1" 404 1247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 40.124.80.238 - - [16/Oct/2026:12:49:18 -0400] "GET /.git/config HTTP/1.1" 404 1247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" 40.124.80.238 - - [16/Oct/2026:12:49:18 -0400] "GET /phpinfo.php HTTP/1.1" 404 200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 francelink.fr	2026-10-16 16:44:24 (8 hours ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-16T16:42:41.000Z.	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 16:38:54 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:38:49.244756 2026] [security2:error] [pid 14231:tid 14231] [client 40.124.80.238:60071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celltechs.net"] [uri "/.env"] [unique_id "atJTGSqpvBFg1I40oyS0wQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 16:18:36 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 40.124.80.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:18:29.793590 2026] [security2:error] [pid 14996:tid 14996] [client 40.124.80.238:51092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonefrog.com"] [uri "/.env"] [unique_id "atJOVas3XQW0EBp3E3QtGAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 210.212.0.75

🇸🇬 47.237.130.241

🇺🇸 207.90.244.19

🇬🇧 185.216.145.179

🇺🇸 147.185.132.41

🇨🇳 110.154.45.85

🇫🇷 89.93.144.25

🇺🇸 85.239.151.10

🇺🇸 70.168.196.74

🇺🇸 45.207.181.167

🇺🇸 20.29.44.58

🇧🇷 191.243.15.32

🇦🇷 190.112.103.237

🇳🇱 185.223.235.22

🇺🇸 169.40.57.81

🇧🇷 168.0.99.187

🇨🇴 152.201.106.213

🇺🇸 142.147.203.46

🇲🇦 105.76.183.86

🇺🇸 104.152.52.224