JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.79.154.198

38.79.154.198 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 87%: ?

87%

ISP	LifeinCloud LTD,
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203919
Hostname(s)	nader.blackshirtbands.org
Domain Name	lifeincloud.com
Country	🇷🇴 Romania
City	Voluntari, Ilfov

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.79.154.198

Whois 38.79.154.198

IP Abuse Reports for 38.79.154.198:

This IP address has been reported a total of 24 times from 16 distinct sources. 38.79.154.198 was first reported on July 5th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-07 22:34:08 (2 days ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-06 22:31:37 (3 days ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 13:54:10 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 38.79.154.198 (nader.blackshirtbands.org): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 38.79.154.198 (nader.blackshirtbands.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:54:02.507668 2026] [security2:error] [pid 27429:tid 27429] [client 38.79.154.198:35628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "niftythrifty.mykidsdaycare.net"] [uri "/.git/HEAD"] [unique_id "akuzeucl826ui20V1U3HdwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-06 12:01:07 (4 days ago)	Try to access /beveiligingstechniek//.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 10:37:29 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 38.79.154.198 (nader.blackshirtbands.org): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 38.79.154.198 (nader.blackshirtbands.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:37:25.673199 2026] [security2:error] [pid 4066:tid 4066] [client 38.79.154.198:43670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notaryfoundation.ic1.biz"] [uri "/.git/HEAD"] [unique_id "akuFZROhpR8HK6pRKBTnYwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 10:06:09 (4 days ago)	Blocked: Reason='Suspicious traffic score=75 (review-based detection)'; Requests=111	Hacking
🇺🇸 mnsf	2026-07-06 10:05:05 (4 days ago)	Abuse Detected (9)	Brute-Force Web App Attack
Anonymous	2026-07-06 08:11:56 (4 days ago)	38.79.154.198 - - [06/Jul/2026:10:11:56 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ... show more 38.79.154.198 - - [06/Jul/2026:10:11:56 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 05:53:17 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 38.79.154.198 (nader.blackshirtbands.org): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 38.79.154.198 (nader.blackshirtbands.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:53:13.023139 2026] [security2:error] [pid 17711:tid 17711] [client 38.79.154.198:54674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northernlightsbev.com.printorganic.com"] [uri "/.git/HEAD"] [unique_id "aktCya6bcVAcxGS-0qG26AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-07-06 05:48:24 (4 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, aws_creds. Observed by 1 sensor(s); 11 hits. show less	Web App Attack
🇫🇮 Kimmo Rieskaniemi	2026-07-06 02:38:27 (4 days ago)	CrowdSec triggered crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 Blexyel	2026-07-06 01:50:08 (4 days ago)	38.79.154.198 - - [06/Jul/2026:03:50:08 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ... show more 38.79.154.198 - - [06/Jul/2026:03:50:08 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇩🇪 macrob	2026-07-06 01:35:20 (4 days ago)	2026/07/06 01:35:18 [error] 1664191#1664191: 353792495 access forbidden by rule, client: 38.79.154. ... show more 2026/07/06 01:35:18 [error] 1664191#1664191: 353792495 access forbidden by rule, client: 38.79.154.198, server: binixo.ph, request: "GET /.git/HEAD HTTP/1.1", host: "binixo.ph" 2026/07/06 01:35:18 [error] 1664193#1664193: 353792601 access forbidden by rule, client: 38.79.154.198, server: binixo.ph, request: "GET /.env HTTP/1.1", host: "binixo.ph" 2026/07/06 01:35:18 [error] 1664191#1664191: 353792495 access forbidden by rule, client: 38.79.154.198, server: binixo.ph, request: "GET /.env.local HTTP/1.1", host: "binixo.ph" ... show less	Web App Attack
🇩🇪 Blexyel	2026-07-06 01:35:00 (4 days ago)	38.79.154.198 - - [06/Jul/2026:03:35:00 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ... show more 38.79.154.198 - - [06/Jul/2026:03:35:00 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-07-06 00:26:52 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 94.154.43.88

🇳🇱 91.92.40.7

🇨🇳 61.177.173.178

🇨🇳 60.162.168.44

🇸🇬 47.84.205.31

🇳🇱 45.148.10.152

🇺🇸 44.4.176.173

🇧🇷 191.7.150.147

🇩🇪 167.172.187.11

🇮🇹 128.116.149.70

🇪🇸 47.61.178.16

🇬🇧 45.82.76.111

🇺🇸 44.17.133.174

🇳🇱 212.56.48.20

🇧🇪 198.235.24.220

🇺🇸 184.168.21.211

🇺🇸 162.216.150.158

🇺🇸 159.26.102.44

🇦🇴 154.116.254.157

🇰🇷 101.36.114.252