JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.38.215.86

45.38.215.86 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 20%: ?

20%

ISP	code200, UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	code200.global
Country	🇵🇱 Poland
City	Bialoleka, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.38.215.86

Whois 45.38.215.86

IP Abuse Reports for 45.38.215.86:

This IP address has been reported a total of 8 times from 8 distinct sources. 45.38.215.86 was first reported on December 18th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-23 03:52:10 (5 days ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont/Mat%C3%A9riau-Aluminium/Taille-XL-49-57-51&order=product.price.desc&resultsPerPag show less	DDoS Attack Web App Attack
🇩🇪 klaus_ph	2026-08-20 13:59:19 (1 week ago)	45.38.215.86 - - [19/Aug/2026:03:43:47 +0200] "POST /psb/AJAX/JSON?method=getItemStatuses HTTP/1.1" ... show more 45.38.215.86 - - [19/Aug/2026:03:43:47 +0200] "POST /psb/AJAX/JSON?method=getItemStatuses HTTP/1.1" 200 2023 "http://h2970065.stratoserver.net/psb/Author/Home?author=%22L%C3%B6ffler%2C%20Fritz%22&lng=gl&page=3&type=Author" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.1678.1651 Safari/537.36" ... show less	Bad Web Bot
Anonymous	2026-07-10 11:14:00 (1 month ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack
🇺🇸 kosada.com	2026-07-10 06:34:40 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 prologic	2026-06-12 20:34:57 (2 months ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
🇪🇸 el-brujo	2026-05-19 17:24:41 (3 months ago)	Cloudflare WAF: Request Path: /hacking_wireless/reaver_modfication_for_pixie_dust_attack_pixiewps-t4 ... show more Cloudflare WAF: Request Path: /hacking_wireless/reaver_modfication_for_pixie_dust_attack_pixiewps-t433666.0.html;wap2= Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: block Source: firewallCustom ASN Description: Datacamp Limited Country: PL Method: GET Timestamp: 2026-05-19T17:24:41Z ruleId: f9cae3e85bc340639e10fc8d384cb1bf. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 Phenix Info	2026-04-02 06:32:20 (4 months ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 TPI-Abuse	2025-12-18 12:55:29 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 45.38.215.86 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.38.215.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 18 07:55:21.047511 2025] [security2:error] [pid 13170:tid 13170] [client 45.38.215.86:9712] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/achadv_files/WS_FTP.LOG"] [unique_id "aUP5uTPQSXuyLxNWfBxunwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::231

🇧🇷 205.210.31.183

🇺🇸 184.105.139.69

🇧🇷 167.250.160.139

🇧🇩 103.234.203.136

🇳🇱 91.92.47.67

🇰🇷 49.254.31.50

🇺🇸 195.184.76.62

🇺🇸 162.216.150.181

🇸🇪 155.4.245.222

🇨🇳 123.14.120.150

🇧🇬 79.124.62.134

🇺🇸 68.154.37.66

🇳🇱 46.151.178.11

🇲🇲 45.41.105.169

🇯🇵 8.209.215.33

🇧🇬 5.188.206.202

🇸🇬 212.73.148.2

🇳🇨 202.22.238.10

🇨🇴 190.29.254.244