JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.128.153.156

138.128.153.156 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 15%: ?

15%

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	fastplanet.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.128.153.156

Whois 138.128.153.156

IP Abuse Reports for 138.128.153.156:

This IP address has been reported a total of 15 times from 6 distinct sources. 138.128.153.156 was first reported on May 10th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-28 22:04:09 (3 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-27. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-28 03:05:53 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 23:05:41.454478 2026] [security2:error] [pid 11042:tid 11042] [client 138.128.153.156:33503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.moaarmorer.com"] [uri "/.env"] [unique_id "ahexBVa8q04-rrKJumc-FwAAAA4"], referer: https://www.google.com/search?q=webmail.moaarmorer.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 01:53:32 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 21:53:22.955051 2026] [security2:error] [pid 12849:tid 12849] [client 138.128.153.156:32973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greed.wisk.org"] [uri "/app/config/parameters.yml"] [unique_id "ahegEkukWXZYcmcA1vW_jgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 01:13:19 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 21:13:10.097648 2026] [security2:error] [pid 4482:tid 4482] [client 138.128.153.156:36165] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|spicerreport.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spicerreport.com"] [uri "/backup.sql"] [unique_id "aheWptlWGKbzgRpRHfSmEwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 00:18:14 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 20:18:11.238489 2026] [security2:error] [pid 31115:tid 31115] [client 138.128.153.156:45289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newbook.flyingdodopublications.com"] [uri "/.env.development"] [unique_id "aheJw8RNOaGwWU5nrEHtqgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 00:23:06 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:22:57.625147 2026] [security2:error] [pid 18303:tid 18303] [client 138.128.153.156:37473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.radio.bluegrassexpressband.com"] [uri "/.env.development.local"] [unique_id "ahY5YXzGKfzXeowFhvuGRQAAAAw"], referer: https://www.google.com/search?q=www.radio.bluegrassexpressband.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 16:44:48 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 138.128.153.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 12:44:43.581674 2026] [security2:error] [pid 19477:tid 19503] [client 138.128.153.156:48421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appraisalteam.net"] [uri "/wp-config.old"] [unique_id "ahXN-57UaO9qoQjw7qBclgAAANc"], referer: https://www.google.com/search?q=appraisalteam.net show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-01 00:22:31 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-05 23:30:16 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-04 02:22:19 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 20:04:14 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇳🇱 true.nl	2023-08-24 20:00:00 (2 years ago)	This IP was part of a DDoS http flood on fietsunie.nl [87.233.134.87] from UTC 24-08-2023 18:00 unt ... show more This IP was part of a DDoS http flood on fietsunie.nl [87.233.134.87] from UTC 24-08-2023 18:00 until 25-08-2023 1:00 show less	DDoS Attack
🇺🇸 nowyouknow	2023-05-11 05:56:05 (3 years ago)	(From [email protected]) Hello, Embark on an inspiring weight loss journey. more at http ... show more (From [email protected]) Hello, Embark on an inspiring weight loss journey. more at https://jo.my/feelgreat Regards Michael Jones //Optout// To stop receiving any further communication, please opt out at https://jo.my/optoutjangle. show less	Phishing Web Spam
🇺🇸 nowyouknow	2023-05-11 05:36:40 (3 years ago)	(From [email protected]) Hello There, About time i found somthing that could help me los ... show more (From [email protected]) Hello There, About time i found somthing that could help me loss it this may help you too! at https://jo.my/feelgreat Regards Thomas Williams //Optout// To stop receiving any further communication, please opt out at https://jo.my/optoutjangleone. show less	Phishing Web Spam
🇺🇸 nowyouknow	2023-05-10 17:13:31 (3 years ago)	(From [email protected]) Hi Ya, A proven weight loss method is within reach. Ready to sei ... show more (From [email protected]) Hi Ya, A proven weight loss method is within reach. Ready to seize the opportunity? more at https://jo.my/feelgreat Regards David Thompson //Optout// To opt out of future communication, please visit https://jo.my/optoutjangle. show less	Phishing Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.102.14

🇩🇪 185.216.214.42

🇳🇬 102.88.137.213

🇷🇴 92.123.103.88

🇺🇸 74.7.242.26

🇩🇪 49.12.107.212

🇷🇴 2.57.121.112

🇻🇳 2402:800:6279:4be0:1575:e774:a81a:af5b

🇨🇳 203.189.196.168

🇺🇸 173.252.83.14

🇻🇳 152.32.249.95

🇫🇮 147.185.133.134

🇺🇸 147.185.132.47

🇺🇸 66.132.186.178

🇲🇾 49.124.153.61

🇺🇸 35.222.117.243

🇬🇧 31.58.18.248

🇷🇴 2.57.121.25

🇹🇷 2.21.100.195

🇺🇸 205.210.31.82