AbuseIPDB » 38.153.139.101
38.153.139.101
This IP was reported 7 times. Confidence of
Abuse
is 0% : ?
ISP
Server Mania Inc.
Usage Type
Fixed Line ISP
ASN
AS174
Domain Name
servermania.com
Country
🇺🇸
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 38.153.139.101 :
This IP address has been reported a total of
7
times from
5 distinct
sources.
38.153.139.101 was first reported on
July 31st 2023 , and the most recent report was
7 months ago
Old Reports:
The most recent abuse report for this IP address is from
7 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2025-11-12 04:33:40
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 38.153.139.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 38.153.139.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:33:31.597803 2025] [security2:error] [pid 2149:tid 2149] [client 38.153.139.101:44973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nbcnewsradio.com"] [uri "/.env.dev"] [unique_id "aRQOG0YuucNasFeYS0tUrwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 14:41:44
(9 months ago)
(mod_security) mod_security (id:212750) triggered by 38.153.139.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:212750) triggered by 38.153.139.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:41:24.075640 2025] [security2:error] [pid 21347:tid 21349] [client 38.153.139.101:36711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bon(?:abort|blur|change|click|dblclick|dragdrop|error|focus|keydown|keypress|keyup|load|mouse(?:down|move|out|over|up)|move|readystatechange|reset|resize|select|submit|unload)\\\\b[^a-zA-Z0-9_]{0,}?=" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "69"] [id "212750"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||mail.kettlehill.com|F|2"] [data "Matched Data: onerror= found within REQUEST_URI: /?spai_vjs=</script><img src=1 onerror=alert(document.domain)>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mail.kettlehill.com"] [uri "/"] [unique_id "aN09lDQa5dHzoOSVGKqAiAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 20:19:27
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 38.153.139.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 38.153.139.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 16:19:24.413888 2025] [security2:error] [pid 9033:tid 9033] [client 38.153.139.101:40971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.deandobkin.com"] [uri "/sftp-config.json"] [unique_id "aNGvTNCT721X1yCzoxw9oQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-22 06:40:03
(9 months ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇦🇺
MAGIC
2023-08-29 19:06:54
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
oncord
2023-08-01 01:02:35
(2 years ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2023-07-31 14:45:55
(2 years ago)
(From [email protected] ) Hi,
Would you be open to do an interview?
We are in ...
show more
(From [email protected] ) Hi,
Would you be open to do an interview?
We are interviewing business owners like you and give them the chance to share their story.
Would you like more information on how this works?
If Yes, please contact this email: [email protected]
We are looking forward to hear from you
Best,
Pam Glow
show less
Phishing
Web Spam
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: