JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.154.217.200

38.154.217.200 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	B2 Net Solutions Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55286
Domain Name	b2netsolutions.com
Country	🇺🇸 United States of America
City	Piscataway, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.154.217.200

Whois 38.154.217.200

IP Abuse Reports for 38.154.217.200:

This IP address has been reported a total of 9 times from 5 distinct sources. 38.154.217.200 was first reported on July 28th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-02-21 07:44:55 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.114 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.114 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-26 23:43:41 (10 months ago)	(mod_security) mod_security (id:217200) triggered by 38.154.217.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217200) triggered by 38.154.217.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 19:39:28.212852 2025] [security2:error] [pid 26224:tid 26570] [client 38.154.217.200:44595] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|whm.kettlehill.net\|F\|2"] [data "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "whm.kettlehill.net"] [uri "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [unique_id "aIVnMPTFOSR3bM1_Ra8bwwAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 02:10:31 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 38.154.217.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.154.217.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 22:10:23.464024 2025] [security2:error] [pid 3957984:tid 3957984] [client 38.154.217.200:58185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.farmers123.com"] [uri "/wp-config.php.txt"] [unique_id "aDkTj_igWPTofuV0atKL0wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-21 23:55:14 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 38.154.217.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 38.154.217.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 21 18:53:11.891654 2023] [security2:error] [pid 11590:tid 47321490409216] [client 38.154.217.200:50443] [client 38.154.217.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/.env.old"] [unique_id "ZV1C5zpnSzGA7RpXKq4qFgAAAZM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 00:23:53 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 05:22:41 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 23:13:49 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2023-08-22 01:02:11 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
Anonymous	2023-07-28 07:11:24 (2 years ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.224.247.66

🇨🇳 117.72.212.5

🇩🇪 69.5.169.165

🇺🇸 207.90.244.21

🇺🇸 172.56.33.250

🇸🇬 165.154.200.214

🇯🇵 160.251.206.106

🇺🇸 144.86.173.49

🇨🇳 124.134.3.86

🇻🇳 103.228.36.70

🇳🇬 102.88.21.136

🇺🇸 68.204.241.69

🇺🇸 64.62.156.111

🇷🇺 46.147.195.11

🇺🇸 43.135.134.180

🇺🇸 24.23.91.198

🇺🇸 23.237.188.34

🇺🇸 18.233.150.11

🇺🇸 209.141.34.44

🇺🇸 172.59.33.81