JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.156.230.29

38.156.230.29 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 52%: ?

52%

ISP	SOMOS NETWORKS COLOMBIA S.A.S. BIC
Usage Type	Fixed Line ISP
ASN	AS271957
Hostname(s)	Dinamic-Somos-38-156-230-29.somosinternet.co
Domain Name	somos.com
Country	🇨🇴 Colombia
City	Medellin, Antioquia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.156.230.29

Whois 38.156.230.29

IP Abuse Reports for 38.156.230.29:

This IP address has been reported a total of 17 times from 11 distinct sources. 38.156.230.29 was first reported on March 22nd 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-08-28 01:35:31 (6 days ago)	PrestaShop faceted search filter flooding attempt	DDoS Attack Bad Web Bot
🇩🇪 FD-IX	2026-08-28 00:34:49 (6 days ago)	Fail2Ban: Automated WooCommerce filter abuse from distributed botnet activity.	Bad Web Bot
🇺🇸 stechusa	2026-08-27 21:26:39 (6 days ago)	[Askari] \| country=CO \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 ove ... show more [Askari] \| country=CO \| Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 over TLS, Targeting specific pages show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-27 21:26:39 (6 days ago)	ELEVATED_THREAT \| country=CO \| ASN=SOMOS NETWORKS COLOMBIA S.A.S. BIC \| Facet request during elevate ... show more ELEVATED_THREAT \| country=CO \| ASN=SOMOS NETWORKS COLOMBIA S.A.S. BIC \| Facet request during elevated threat (facet_ratio=0.85, unique_ips=312) \| 21 IPs targeting /brand/satco-products-inc/satco-light-bulbs.html \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2026-08-27 04:19:16 (1 week ago)	(mod_security) mod_security (id:210381) triggered by 38.156.230.29 (Dinamic-Somos-38-156-230-29.somo ... show more (mod_security) mod_security (id:210381) triggered by 38.156.230.29 (Dinamic-Somos-38-156-230-29.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 00:19:07.989154 2026] [security2:error] [pid 15812:tid 15819] [client 38.156.230.29:60026] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.certifiedebusinessconsultant.com\|F\|4"] [data "REQUEST_URI=/thickbox/languages/%5C%22%3$s%5C%22"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.certifiedebusinessconsultant.com"] [uri "/thickbox/languages/%5C%22%3$s%5C%22"] [unique_id "ao-6ux7rKPN5LmOXN-NF0QAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-26 13:01:11 (1 week ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 gui-ying233	2026-08-23 20:16:24 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-08-23 00:20:19 (1 week ago)	Fail2Ban: 38.156.230.29 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 38.156.230.29 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.4007.1214 Mobile Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-21 16:01:47 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 38.156.230.29 (Dinamic-Somos-38-156-230-29.somo ... show more (mod_security) mod_security (id:210730) triggered by 38.156.230.29 (Dinamic-Somos-38-156-230-29.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 12:01:41.352306 2026] [security2:error] [pid 16254:tid 16333] [client 38.156.230.29:24366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|killyourattitude.com\|F\|2"] [data ".bat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "killyourattitude.com"] [uri "/fatcon99/koth.bat"] [unique_id "aoh2ZVe9ble8Y5pLks_9PgAAAFI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-19 02:15:34 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-18 18:43:11 (2 weeks ago)	Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use \| path: ... show more Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use \| path: /32-meilleur-velo-entre-4000-et-5000-euros show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-08-07 07:15:15 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-28 03:19:30 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 14:48:14 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-06-18 10:17:22 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -86.054 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -86.054 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chr show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.66

🇦🇷 38.211.32.234

🇩🇪 213.209.159.238

🇨🇭 209.99.185.195

🇪🇨 200.125.142.15

🇲🇽 189.203.192.158

🇺🇸 162.216.150.49

🇨🇳 119.249.100.240

🇹🇼 220.132.243.86

🇲🇾 202.165.25.8

🇧🇷 186.193.229.70

🇫🇷 144.91.95.188

🇨🇳 123.245.84.45

🇻🇳 103.28.38.27

🇺🇸 52.168.141.47

🇺🇸 50.150.191.46

🇨🇳 47.98.118.157

🇺🇸 34.125.61.249

🇺🇸 165.227.206.203

🇺🇸 158.51.126.147