138.117.76.196

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
79% Critical
20 reports
14 reporters ยท latest 11 hours ago
ISP
Giganet Comunicaciones
Usage Type
Government
ASN
AS263774
Domain Name
giganet.net.py
Country
๐Ÿ‡ฆ๐Ÿ‡ท Argentina
City
Posadas, Misiones
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 5 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 5 ๐Ÿ‡ฆ๐Ÿ‡น Austria 4
Most common categories Port Scan 11 Hacking 4 Bad Web Bot 3 SSH 3 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:35168 dst:23
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 | 2026-11-08 13:59 UTC
Bad Web Bot
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 23) Source port: 33648 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 138.117.76.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
๐Ÿ‡ธ๐Ÿ‡ฌ khairilgunawan
ZonaKuota Sentinel: Port honeypot probe detected on port 22 (SSH). Unauthorized scanner blocked.
Port Scan SSH
๐Ÿ‡จ๐Ÿ‡ฟ Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-11-05 11:13:38 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท sthoyer.de
Port Scan
๐Ÿ‡บ๐Ÿ‡ฆ URAN Publishing Service
[04/Nov/2026:04:45:58 +0200] -- 138.117.76.196 Ban reason: Scanner [CMS_GENERIC] | Request: POST /xmlrpc.php HTTP/1.1
Bad Web Bot Web App Attack
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ ras07
Brute force SSH login attempts.
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0 | src_port: 57168
Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ francelink.fr
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T21:57:40.000Z.
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:53150 dst:23
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡จ๐Ÿ‡ณ 119.4.109.84
๐Ÿ‡จ๐Ÿ‡ณ 223.247.218.112
๐Ÿ‡ณ๐Ÿ‡ฑ 193.47.62.187
๐Ÿ‡จ๐Ÿ‡ฑ 190.162.113.74
๐Ÿ‡บ๐Ÿ‡ธ 172.69.58.214
๐Ÿ‡ฌ๐Ÿ‡ง 141.98.252.244
๐Ÿ‡ฌ๐Ÿ‡ง 35.203.210.116
๐Ÿ‡ง๐Ÿ‡ช 23.251.135.142
๐Ÿ‡ญ๐Ÿ‡ณ 181.78.100.179
๐Ÿ‡ซ๐Ÿ‡ฎ 170.168.31.201
๐Ÿ‡บ๐Ÿ‡ธ 73.147.65.118
๐Ÿ‡บ๐Ÿ‡ธ 66.132.195.60
๐Ÿ‡บ๐Ÿ‡ธ 23.94.252.90
๐Ÿ‡ฉ๐Ÿ‡ช 193.124.20.245
๐Ÿ‡บ๐Ÿ‡ธ 159.89.85.210
๐Ÿ‡ญ๐Ÿ‡ฐ 150.5.141.198
๐Ÿ‡ง๐Ÿ‡ท 131.108.187.30
๐Ÿ‡ง๐Ÿ‡ท 131.100.17.20
๐Ÿ‡ฐ๐Ÿ‡ท 115.160.76.23
๐Ÿ‡ช๐Ÿ‡ธ 65.20.101.156
feedback