JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.154.195.242

38.154.195.242 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	B2 Net Solutions Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55286
Domain Name	b2netsolutions.com
Country	🇺🇸 United States of America
City	Piscataway, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.154.195.242

Whois 38.154.195.242

IP Abuse Reports for 38.154.195.242:

This IP address has been reported a total of 9 times from 4 distinct sources. 38.154.195.242 was first reported on July 28th 2023, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2025-08-10 09:20:07 (10 months ago)	IP was involved in L7 DDoS attack.	DDoS Attack
🇺🇸 TPI-Abuse	2025-07-03 13:52:56 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 09:52:35.740648 2025] [security2:error] [pid 27075:tid 27148] [client 38.154.195.242:46537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/wp-config.php.old"] [unique_id "aGaLI_Bvk_ICQaNEN8iO5QAAAcU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 15:30:31 (1 year ago)	(mod_security) mod_security (id:211190) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211190) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 11:30:14.097174 2025] [security2:error] [pid 2877921:tid 2877921] [client 38.154.195.242:35749] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|autodiscover.farmers123.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /maint/modules/home/index.php?lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00english"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/maint/modules/home/index.php"] [unique_id "aDh9hvf3VCQAXU-jYHMzqAAAAAI"], referer: autodiscover.farmers123.com/maint/index.php?packages show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 14:12:27 (1 year ago)	(mod_security) mod_security (id:211190) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211190) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:12:19.268970 2025] [security2:error] [pid 4427:tid 4483] [client 38.154.195.242:55473] [client 38.154.195.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|mail.kettlehill.net\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-content/plugins/mypixs/mypixs/downloadpage.php?url=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.net"] [uri "/wp-content/plugins/mypixs/mypixs/downloadpage.php"] [unique_id "Z8BywzfNDME5gK_tiCe4tAAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 12:18:48 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 38.154.195.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 07:18:40.957210 2023] [security2:error] [pid 24234:tid 47138635564800] [client 38.154.195.242:33437] [client 38.154.195.242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kettlehill.net\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.net"] [uri "/www.kettlehill.net/error.log"] [unique_id "ZVn9IIrAQmvOs9UNZt7bWgAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 02:06:43 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 03:44:55 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 21:17:01 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227 show less	Bad Web Bot
Anonymous	2023-07-28 07:31:13 (2 years ago)	\| Suspicious URL access.	Hacking SQL Injection Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.172.177

🇫🇮 147.185.133.122

🇷🇴 141.98.83.240

🇫🇷 91.231.89.61

🇫🇷 91.231.89.54

🇫🇷 91.231.89.49

🇺🇸 45.79.153.51

🇬🇧 35.203.210.168

🇺🇸 15.204.184.105

🇺🇸 216.25.89.129

🇺🇸 195.184.76.180

🇸🇬 178.128.212.46

🇩🇪 151.243.11.248

🇫🇮 147.185.133.68

🇺🇸 147.185.132.69

🇭🇰 118.193.38.134

🇷🇴 92.118.39.71

🇫🇷 91.231.89.14

🇫🇷 91.231.89.10

🇺🇸 52.248.40.89