AbuseIPDB » 38.154.152.242
38.154.152.242
This IP was reported 6 times. Confidence of
Abuse
is 23% : ?
ISP
Server Mania Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS55286
Domain Name
servermania.com
Country
🇺🇸
United States of America
City
Buffalo, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 38.154.152.242 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
38.154.152.242 was first reported on
September 26th 2026 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
big-cloud.nl
2026-10-04 22:05:13
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇮🇹
Inartis
2026-10-01 03:51:06
(2 weeks ago)
38.154.152.242 - - [01/Oct/2026:05:51:05 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 5207 "https://blo ...
show more
38.154.152.242 - - [01/Oct/2026:05:51:05 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 5207 "https://blog.bristolbuja.it/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-29 04:32:01
(2 weeks ago)
WordPress attack-tool calls | method: GET | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Wi ...
show more
WordPress attack-tool calls | method: GET | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
show less
Web App Attack
Hacking
🇮🇹
Inartis
2026-09-26 07:11:10
(2 weeks ago)
38.154.152.242 - - [26/Sep/2026:09:11:02 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 5692 "https://blo ...
show more
38.154.152.242 - - [26/Sep/2026:09:11:02 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 5692 "https://blog.abanoritz.it/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
38.154.152.242 - - [26/Sep/2026:09:11:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5692 "https://blog.abanoritz.it" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
38.154.152.242 - - [26/Sep/2026:09:11:09 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5692 "https://blog.abanoritz.it" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-26 04:03:25
(3 weeks ago)
[SatSep2606:03:18.8752252026][security2:error][pid380331:tid380333][client38.154.152.242:0]ModSecuri ...
show more
[SatSep2606:03:18.8752252026][security2:error][pid380331:tid380333][client38.154.152.242:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.vetreriaperletti.ch\"][uri\"/xmlrpc.php\"][unique_id\"ardEBuM7DF1BH0T3RbhcxgAAAIA\"]\,referer:https://www.vetreriaperletti.ch
show less
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-09-26 00:03:48
(3 weeks ago)
Try to access /xmlrpc.php?rsd
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: