AbuseIPDB » 38.7.16.81
38.7.16.81
This IP was reported 9 times. Confidence of
Abuse
is 0% : ?
ISP
INTERNET TELEFONIA Y TV DE MICHOACAN SA de CV
Usage Type
Fixed Line ISP
ASN
AS28398
Hostname(s)
customer-38-7-16-81.gbic.mx
Domain Name
gbic.mx
Country
🇲🇽
Mexico
City
Morelia, Michoacan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 38.7.16.81 :
This IP address has been reported a total of
9
times from
6 distinct
sources.
38.7.16.81 was first reported on
May 4th 2022 , and the most recent report was
1 year ago
Old Reports:
The most recent abuse report for this IP address is from
1 year ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
COMPLEX
2025-06-03 03:49:24
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from MX.
Action taken: BLOCK
ASN: 28398 (INTERNET TELEFONIA Y TV D ...
show more
Triggered Cloudflare WAF (l7ddos) from MX.
Action taken: BLOCK
ASN: 28398 (INTERNET TELEFONIA Y TV DE MICHOACAN SA DE CV)
Protocol: HTTP/2 (GET method)
Endpoint: /
show less
DDoS Attack
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-05-18 12:19:09
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇪🇸
10dencehispahard SL
2025-05-16 06:42:20
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇩🇪
Packets-Decreaser.NET
2025-02-22 23:21:43
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
komaru.rip
2022-08-03 06:49:00
(3 years ago)
ddos
DDoS Attack
🇧🇪
Rory&
2022-06-02 23:00:00
(4 years ago)
Active DDoS Attack (botnet)
DDoS Attack
🇧🇪
Rory&
2022-06-02 23:00:00
(4 years ago)
Active DDoS Attack (botnet)
DDoS Attack
🇺🇸
Blue Pumpkin
2022-05-04 11:09:13
(4 years ago)
[Wed May 04 15:09:03.384339 2022] [:error] [pid 2981490] [client 38.7.16.81:0] [client 38.7.16.81] M ...
show more
[Wed May 04 15:09:03.384339 2022] [:error] [pid 2981490] [client 38.7.16.81:0] [client 38.7.16.81] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/index.php"] [unique_id "YnKXDq377S_dbdSJfhkkLAAAAGM"]
[Wed May 04 15:09:04.473175 2022] [:error] [pid 2981490] [client 38.7.16.81:0] [client 38.7.16.81] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/in
...
show less
Brute-Force
🇺🇸
Blue Pumpkin
2022-05-04 07:34:09
(4 years ago)
[Wed May 04 11:32:54.940955 2022] [:error] [pid 2879510] [client 38.7.16.81:0] [client 38.7.16.81] M ...
show more
[Wed May 04 11:32:54.940955 2022] [:error] [pid 2879510] [client 38.7.16.81:0] [client 38.7.16.81] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/index.php"] [unique_id "YnJkZs70PzxdgIYX4JntDQAAAFA"]
[Wed May 04 11:32:55.967077 2022] [:error] [pid 2879337] [client 38.7.16.81:0] [client 38.7.16.81] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/in
...
show less
Brute-Force
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: