JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.56.68.198

38.56.68.198 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 11%: ?

11%

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS270221
Domain Name	cogentco.com
Country	🇲🇽 Mexico
City	Villa Hidalgo, Jalisco

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.56.68.198

Whois 38.56.68.198

IP Abuse Reports for 38.56.68.198:

This IP address has been reported a total of 5 times from 5 distinct sources. 38.56.68.198 was first reported on April 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-20 02:40:55 (2 days ago)	[Tue Oct 20 09:40:54.436348 2026] [security2:error] [pid 51094:tid 139776707499712] [client 38.56.68 ... show more [Tue Oct 20 09:40:54.436348 2026] [security2:error] [pid 51094:tid 139776707499712] [client 38.56.68.198:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=475&id=1130%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-12-september-2016&start=100 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=1130%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-12-september-2016&st..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "atbUts-_uIt3J6 ... show less	Email Spam Hacking
🇫🇷 Tilellit.PRO	2026-09-04 03:01:34 (1 month ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
Anonymous	2026-07-05 00:00:24 (3 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/mikrotik/shopby/manufacturer-rcf-lsi-ask_proxima-plantronics-projectiondesign-mikrotik-xyz-unify.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇮🇹 A000Z	2026-04-27 18:10:27 (5 months ago)	Fail2Ban: 38.56.68.198 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 38.56.68.198 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.3539.1429 Safari/537.36 show less	Bad Web Bot
🇳🇱 maxxsense	2026-04-08 23:23:47 (6 months ago)	38.56.68.198 (MX/Mexico/-), 12 distributed imapd attacks on account [redacted]	Brute-Force

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.51.148.194

🇩🇪 213.209.159.241

🇩🇪 213.209.159.11

🇹🇭 203.156.108.110

🇺🇦 178.158.65.182

🇺🇸 104.22.64.185

🇨🇳 219.146.127.71

🇺🇸 185.223.152.115

🇧🇩 103.158.119.217

🇨🇦 85.217.149.56

🇨🇦 85.217.149.50

🇩🇪 62.96.11.251

🇺🇸 2604:86c0:3001:6::2

🇳🇱 212.30.37.177

🇧🇬 193.24.211.219

🇲🇽 177.226.66.49

🇧🇷 118.26.105.52

🇩🇪 109.160.32.150

🇳🇱 81.19.216.79

🇹🇼 61.219.156.91