JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.7.2.17

38.7.2.17 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 29%: ?

29%

ISP	GIGAPOP, C.A.
Usage Type	Fixed Line ISP
ASN	AS271899
Domain Name	gigapop.com.ve
Country	🇻🇪 Venezuela (Bolivarian Republic of)
City	Maracaibo, Zulia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.7.2.17

Whois 38.7.2.17

IP Abuse Reports for 38.7.2.17:

This IP address has been reported a total of 42 times from 25 distinct sources. 38.7.2.17 was first reported on July 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 francelink.fr	2026-10-21 11:20:28 (1 day ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-21T11:18:03.000Z.	Web App Attack
🇺🇸 TPI-Abuse	2026-10-03 13:48:19 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 38.7.2.17 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210350) triggered by 38.7.2.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 09:48:15.449491 2026] [security2:error] [pid 980:tid 980] [client 38.7.2.17:49960] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|surrenderhouse.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "surrenderhouse.com"] [uri "/"] [unique_id "asEHn-ZG-7Lb2zI0H-WlGgAAAAY"], referer: https://linkbuildingplatform.website/dir/ranking-focused-backlinks-201383 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-09-30 04:26:09 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇫🇮 saamkuu	2026-09-29 05:47:10 (3 weeks ago)	DDoS botnet: TCP connection flood, 24 connections to port 443.	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-28 21:20:35 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 38.7.2.17 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210350) triggered by 38.7.2.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:20:28.315014 2026] [security2:error] [pid 27851:tid 27851] [client 38.7.2.17:54760] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|turtlehill.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "turtlehill.org"] [uri "/"] [unique_id "arraHBS7jDUyxRij1ujyswAAAAo"], referer: https://dudjom.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 14:28:54 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 04:10:33 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 11:30:19 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-28 15:02:36 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 milcraft.nl	2026-08-16 01:34:56 (2 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 16:21:58 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 38.7.2.17 (-): 1 in the last 300 secs; Ports: * ... show more (mod_security) mod_security (id:210730) triggered by 38.7.2.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:21:55.783993 2026] [security2:error] [pid 3917:tid 3944] [client 38.7.2.17:40260] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dasperformance.com\|F\|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/blog/page/2/W WW.DAS performance.com"] [unique_id "ak55IxhoSXITEukjznCKTQAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-06-21 21:27:12 (4 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇬🇧 PeravixGroup	2026-05-24 04:24:55 (4 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇫🇷 security.rdmc.fr	2026-05-23 00:48:58 (4 months ago)	Port Scan Attack proto:TCP src:46711 dst:23	Port Scan
Anonymous	2026-05-12 20:39:27 (5 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.91.69.77

🇨🇳 183.6.50.31

🇨🇳 175.11.71.226

🇮🇹 88.51.148.23

🇺🇸 66.132.172.242

🇧🇷 35.199.77.237

🇧🇷 201.139.186.238

🇬🇧 200.138.46.44

🇳🇱 185.136.15.82

🇺🇸 152.39.172.65

🇵🇰 103.244.172.24

🇷🇺 89.109.4.236

🇬🇧 78.153.140.237

🇧🇪 34.156.51.173

🇺🇸 207.90.244.25

🇦🇷 181.1.125.84

🇺🇦 176.105.208.121

🇹🇼 114.35.59.237

🇫🇷 104.28.216.31

🇮🇹 101.57.17.158