JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.154.200.221

38.154.200.221 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 12%: ?

12%

ISP	B2 Net Solutions Inc.
Usage Type	Fixed Line ISP
ASN	AS55286
Domain Name	b2netsolutions.com
Country	🇺🇸 United States of America
City	Piscataway, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.154.200.221

Whois 38.154.200.221

IP Abuse Reports for 38.154.200.221:

This IP address has been reported a total of 8 times from 3 distinct sources. 38.154.200.221 was first reported on October 30th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-28 22:03:59 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-27. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-28 00:17:57 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 38.154.200.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.154.200.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 20:17:51.115753 2026] [security2:error] [pid 4132:tid 4132] [client 38.154.200.221:34001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "curriergallery.com"] [uri "/.env.bak"] [unique_id "aheJr2vL82yr5HnGUbNNAgAAAAM"], referer: https://www.google.com/search?q=curriergallery.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-27 21:59:27 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-05-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-27 00:22:26 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 38.154.200.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.154.200.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:22:20.183989 2026] [security2:error] [pid 1339:tid 1339] [client 38.154.200.221:51905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vsecuritysolutions.com"] [uri "/sftp-config.json"] [unique_id "ahY5PEDErlnzx9rsKG1EYwAAAA4"], referer: https://www.google.com/search?q=vsecuritysolutions.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 17:53:59 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 38.154.200.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.154.200.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 13:53:45.169028 2026] [security2:error] [pid 22960:tid 22960] [client 38.154.200.221:33885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krugmans.net"] [uri "/sftp-config.json"] [unique_id "ahXeKXkH-FLZhD1b7IOsfAAAABA"], referer: https://www.google.com/search?q=krugmans.net show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 02:53:59 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 05:21:24 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 20:25:55 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.132.127.66

🇰🇷 210.105.125.200

🇻🇳 115.75.103.32

🇨🇳 111.26.115.122

🇭🇰 101.36.106.78

🇺🇸 209.25.184.186

🇺🇸 203.88.119.100

🇧🇷 200.217.54.130

🇧🇷 200.159.14.187

🇧🇷 200.153.86.250

🇲🇾 47.254.192.137

🇨🇳 1.80.112.47

🇳🇱 195.178.110.26

🇮🇳 182.95.232.186

🇧🇷 177.104.203.183

🇨🇳 175.10.8.83

🇻🇳 171.231.192.219

🇧🇷 148.227.123.39

🇳🇱 45.148.10.157

🇧🇪 34.78.243.73