JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

84.38.135.10

Activity Trending Down

Abuse Confidence Score

2% Caution

68 reports

48 reporters · latest 1 week ago

ISP: SIA RixHost
Usage Type: Data Center/Web Hosting/Transit
ASN: AS52048
Domain Name: rixhost.lv
Country: 🇱🇻 Latvia
City: Riga, Riga

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

68 from 48 distinct reporters

First reported

October 25th 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1

Most common categories Bad Web Bot 1 Web App Attack 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-10-26 06:21:26 UTC · (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Error404-LocalePath (/de32396/Products/BodyFirming)	Hacking Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-09-04 13:35:18 UTC · (2 months ago)	Blocked by UFW (TCP on 61041) Source port: 10081 TTL: 112 Packet length: 52 TOS: 0x00 This report (for 84.38.135.10) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇮🇱 spd.co.il	2026-08-14 22:01:50 UTC · (2 months ago)	Web application attack detected	Hacking Web App Attack
Anonymous	2026-08-14 02:14:04 UTC · (2 months ago)	Bot / scanning and/or hacking attempts: GET /wp-config.php.save HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.inc HTTP/1.1, GET /wp-config.php.bk HTTP/1.1, GET /wp-config.php.old HTTP/1.1, GET /wp-config.old HTTP/1.1, GET /wp-config.php.bak ... show more Bot / scanning and/or hacking attempts: GET /wp-config.php.save HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.inc HTTP/1.1, GET /wp-config.php.bk HTTP/1.1, GET /wp-config.php.old HTTP/1.1, GET /wp-config.old HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /wp-config.php.SAVE HTTP/1.1, GET /.wp-config.php.swp HTTP/1.1, GET /wp-config.php.OLD HTTP/1.1, GET /wp-config.php.original HTTP/1.1, GET /wp-config.backup HTTP/1.1, GET /wp-config.php.html HTTP/1.1, GET /wp-config.php_orig HTTP/1.1, GET /wp-config.php.orig HTTP/1.1, GET /wp-config.php-backup HTTP/1.1, GET /wp-config.php.BAK HTTP/1.1, GET /wp-config.txt HTTP/1.1, GET /wp-config.php.inc HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /wp-config.php.txt HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 paissangroup	2026-08-14 02:07:31 UTC · (2 months ago)	Multiple WAF Violations	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-14 00:17:49 UTC · (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 Matthew Ping	2026-08-13 23:30:02 UTC · (2 months ago)	Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on wp3.	DDoS Attack Brute-Force
🇧🇷 Halux	2026-08-13 21:47:09 UTC · (2 months ago)	84.38.135.10 Web Application Firewall multiple violations	Hacking Web App Attack
🇮🇹 mgarofano80	2026-08-13 18:22:22 UTC · (2 months ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-13 17:33:40 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 84.38.135.10 (ip-135-10.dataclub.info): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 13:33:33.892215 2026] [security2:error] [pid 5983:tid 5983] [client 84. ... show more (mod_security) mod_security (id:210492) triggered by 84.38.135.10 (ip-135-10.dataclub.info): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 13:33:33.892215 2026] [security2:error] [pid 5983:tid 5983] [client 84.38.135.10:49466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slattery-law.com"] [uri "/wp-config.php.txt"] [unique_id "an3_7S2ZMxv4bQr9h7504gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-08-13 15:26:51 UTC · (2 months ago)	80,443	Brute-Force SSH
🇳🇱 Mangelot Hosting	2026-08-13 06:56:26 UTC · (2 months ago)	(wp_config_access) srv101 WordPress wp-config Scan 84.38.135.10 (LV/Latvia/ip-135-10.dataclub.info): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇫🇷 dynamix	2026-08-13 03:01:26 UTC · (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Matthew Ping	2026-08-13 03:00:02 UTC · (2 months ago)	Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on dedicated.	DDoS Attack Brute-Force
🇩🇪 LRob	2026-08-13 01:49:55 UTC · (2 months ago)	Credential and secrets file probing \| req: /wp-config.php.save \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) \x09\x09\x09Chrome/55.0.2883.95 Safari/537.36	Hacking Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 70.164.36.43

🇧🇷 45.232.73.84

🇳🇱 193.176.31.215

🇷🇺 178.176.85.54

🇷🇪 92.130.51.148

🇺🇸 66.132.186.232

🇧🇷 45.187.121.38

🇩🇴 45.172.152.74

🇳🇱 45.148.10.141

🇬🇧 35.203.211.136

🇳🇱 213.177.179.80

🇲🇱 197.155.168.61

🇺🇿 94.158.58.84

🇳🇱 93.123.109.164

🇷🇴 92.118.39.49

🇫🇷 91.231.89.156

🇧🇬 79.124.49.70

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇭🇰 216.118.231.170