AbuseIPDB » 138.0.146.209
138.0.146.209
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
INTERNET O SUL TELECOM LTDA.
Usage Type
Fixed Line ISP
ASN
AS264566
Domain Name
internetosul.com.br
Country
🇧🇷
Brazil
City
Porto Alegre, Rio Grande do Sul
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 138.0.146.209 :
This IP address has been reported a total of
5
times from
4 distinct
sources.
138.0.146.209 was first reported on
November 19th 2023 , and the most recent report was
2 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-07-03 09:52:13
(2 hours ago)
[Fri Jul 03 16:52:10.027029 2026] [security2:error] [pid 304304:tid 140643752994496] [client 138.0.1 ...
show more
[Fri Jul 03 16:52:10.027029 2026] [security2:error] [pid 304304:tid 140643752994496] [client 138.0.146.209:46139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-S916U1 Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "akeGSusxr-iwrJsvug-IqAAASAI"], referer https://w
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-07-01 08:35:18
(2 days ago)
[Wed Jul 01 15:35:13.915690 2026] [security2:error] [pid 201923:tid 139637547800256] [client 138.0.1 ...
show more
[Wed Jul 01 15:35:13.915690 2026] [security2:error] [pid 201923:tid 139637547800256] [client 138.0.146.209:41764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "akTRQT-hG8NclMkSrQnYrAAAEQ0"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[201937] [faH0kUhzgQY] [akTRQT-hG8NclMkSrQnYrAAAEQ0] keep_alive=[1] [2026-07-01 15:35:13.915702] [R:akTRQT-hG8NclMkSrQnYrAAAEQ0]
...
show less
Email Spam
Hacking
🇨🇭
backslash
2025-08-30 05:01:00
(10 months ago)
Bad Web Bot
🇪🇸
Global Cyber Police
2025-07-27 15:58:56
(11 months ago)
Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).
Port Scan
Brute-Force
Web App Attack
🇩🇪
Pingger Shikkoken
2023-11-19 10:22:59
(2 years ago)
Participating in DDoS Amplification Attack! Sending 14 requests over 6642s asking for ?0? of apple.c ...
show more
Participating in DDoS Amplification Attack! Sending 14 requests over 6642s asking for ?0? of apple.com, cisco.com, atlassian.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: