JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.224.149.222

38.224.149.222 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 33%: ?

33%

ISP	TU NORTETV TELECOMUNICACIONES S.A.S.
Usage Type	Fixed Line ISP
ASN	AS272937
Domain Name	tunorte.co
Country	🇨🇴 Colombia
City	Maicao, La Guajira Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.224.149.222

Whois 38.224.149.222

IP Abuse Reports for 38.224.149.222:

This IP address has been reported a total of 16 times from 11 distinct sources. 38.224.149.222 was first reported on June 9th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-27 00:35:35 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 38.224.149.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 38.224.149.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:35:30.143679 2026] [security2:error] [pid 1215:tid 1215] [client 38.224.149.222:39056] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jaragoodrich.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jaragoodrich.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at_x0vr_Fn9yQSXoqjx_CAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-10-19 13:57:45 (1 week ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 20:37:14 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 38.224.149.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 38.224.149.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:37:11.369056 2026] [security2:error] [pid 10124:tid 10124] [client 38.224.149.222:52761] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|casapapayasanmiguel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casapapayasanmiguel.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKK989Ure_DRZ4lcRGLjwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2026-10-13 22:16:29 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CO. Action taken: BLOCK Protocol: HTTP/2 (POST method ... show more Triggered Cloudflare WAF (firewallCustom) from CO. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 SX Communications	2026-10-11 19:59:19 (2 weeks ago)	Web spam bot from 38.224.149.222: automated HTTPS requests for fake pharmacy / prescription / drug S ... show more Web spam bot from 38.224.149.222: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 4 hits; paths: /bbs/202509/Pharmacy-Online-0">&lt/a&gt. show less	Web Spam Blog Spam Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-30 10:57:34 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 38.224.149.222 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 38.224.149.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:57:28.327606 2026] [security2:error] [pid 28879:tid 28879] [client 38.224.149.222:41043] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|graduationnapkins.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "graduationnapkins.com"] [uri "/"] [unique_id "arzrGF87wOXto9BuZeitRwAAABw"], referer: https://localbacklinks.website/dir/quality-link-building-85009 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-26 11:08:31 (1 month ago)	denied traffic to a honeypot user target.	Port Scan Hacking
Anonymous	2026-09-26 10:50:03 (1 month ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇺🇸 pixelmemory.us	2026-09-09 18:58:03 (1 month ago)	2026-09-09T18:45:11 38.224.149.222 GET /Photos/Vacation/2021-11-19%20Tropics/raw/DSC04918.ARW Mozill ... show more 2026-09-09T18:45:11 38.224.149.222 GET /Photos/Vacation/2021-11-19%20Tropics/raw/DSC04918.ARW Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 02:14:00 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-08-10 04:38:06 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 kosada.com	2026-08-06 03:23:39 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Tilellit.PRO	2026-08-01 02:02:38 (2 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-25 21:30:39 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-07-20 04:10:42 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.496 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.496 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Sa show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇶 213.16.30.130

🇨🇭 209.99.190.186

🇭🇰 114.111.53.214

🇺🇸 72.14.186.195

🇺🇸 66.132.224.224

🇬🇧 45.82.76.101

🇨🇳 223.111.161.82

🇧🇪 198.235.24.218

🇹🇳 196.238.246.255

🇭🇰 185.227.152.135

🇹🇷 166.0.249.26

🇺🇸 162.216.150.29

🇫🇮 147.185.133.159

🇺🇸 147.182.181.162

🇫🇷 147.78.41.25

🇹🇭 147.50.231.99

🇨🇦 143.198.34.222

🇳🇬 105.112.124.82

🇵🇰 103.162.41.177

🇳🇱 77.239.124.249