This IP address has been reported a total of
4
times from
4 distinct
sources.
38.211.207.189 was first reported on
August 29th 2025 , and the most recent report was
3 days ago .
In the last 60 days, the top reporter locations were:
Germany
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web Spam
1
time;
Web App Attack
1
time;
Bad Web Bot
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΊπΈ
TPI-Abuse
2026-10-04 06:42:08
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 38.211.207.189 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 38.211.207.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 02:42:04.793073 2026] [security2:error] [pid 16115:tid 16115] [client 38.211.207.189:4370] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||majersigns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "majersigns.com"] [uri "/"] [unique_id "asH1PGvCAgQ-KbGt-nB22AAAAAY"], referer: https://seolinkbuildingservices.shop/dir/seo-outreach-backlinks-128858
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
ksol-hostmaster
2026-10-03 23:51:56
(4 days ago)
2026/10/04 01:51:55 [error] 27777#398580: *1103243 access forbidden by rule, client: 38.211.207.189, ...
show more
2026/10/04 01:51:55 [error] 27777#398580: *1103243 access forbidden by rule, client: 38.211.207.189, server: new.hondaforum.hu, request: "GET /topic/honda-accord/442036/ HTTP/1.1", host: "new.hondaforum.hu"
...
show less
Web Spam
π³π±
Cloud86 B.V.
2025-09-12 03:15:01
(1 year ago)
Email spam
Email Spam
π³π±
exxos
2025-08-29 01:05:34
(1 year ago)
http-no-verb
Hacking
Showing 1 to
4
of 4 reports