This IP address has been reported a total of
8
times from
6 distinct
sources.
38.178.74.202 was first reported on
January 28th 2026 , and the most recent report was
3 hours ago United States of America
with 3
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Hacking
3
times;
Bad Web Bot
3
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-10-13 14:10:33
(3 hours ago)
Shop search flood (L7 DDoS) | path: /18-velo-route | query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Be ...
show more
Shop search flood (L7 DDoS) | path: /18-velo-route | query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont/Mat%C3%A9riau-Carbone/Taille-XS-M/Marque-Scott/Famille-Addict&order=product.name. | src_port: 41946
show less
DDoS Attack
Web App Attack
🇺🇸
ipblock.com
2026-09-25 22:49:00
(2 weeks ago)
IPBlock protected site ID [4055-d][s=06].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-09-06 05:46:00
(1 month ago)
IPBlock protected site ID [4055-d][s=02].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-08-25 23:22:00
(1 month ago)
IPBlock protected site ID [4055-d][s=02].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 09:46:59
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 38.178.74.202 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 38.178.74.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 05:46:52.309086 2026] [security2:error] [pid 1979887:tid 1979921] [client 38.178.74.202:49921] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gafm.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "anrvjEzFjnpjLLbmkGi6QAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-11 05:13:53
(4 months ago)
(antiscrape_rule) Web application abuse detected 38.178.74.202 (US/United States/-): 5 in the last 9 ...
show more
(antiscrape_rule) Web application abuse detected 38.178.74.202 (US/United States/-): 5 in the last 900 secs
show less
Hacking
🇸🇬
mypatricks
2026-02-06 20:45:47
(8 months ago)
38.178.74.202 | Port: 11844 | DNS: 38.178.74.202 2026-02-07T04:45:46+08:00 America/New_York | Suspic ...
show more
38.178.74.202 | Port: 11844 | DNS: 38.178.74.202 2026-02-07T04:45:46+08:00 America/New_York | Suspicious Spoofing Activity | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0 HTTP/1.1 443 GET | URL: /fondant-cakes/?348bdd7bb910063ea60=GBP&code=GBP | Ref: - | Country: US/United States/-08:00 IP City: Waycross macOS 9c9d7e2caa729ac6-MIA/Miami, FL, United States 1 hits/0 secs Robots 3
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
🇨🇦
polycoda
2026-01-28 21:32:12
(8 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
