AbuseIPDB » 138.121.181.245
138.121.181.245
This IP was reported 9 times. Confidence of
Abuse
is 5% : ?
ISP
PIRES & PAULA LTDA
Usage Type
Fixed Line ISP
ASN
AS264302
Domain Name
connectesite.com.br
Country
🇧🇷
Brazil
City
Colinas do Tocantins, Tocantins
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 138.121.181.245 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
138.121.181.245 was first reported on
August 12th 2024 , and the most recent report was
12 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-15 20:26:25
(12 hours ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2025-11-20 03:24:52
(7 months ago)
scanning http requests from known botnet
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 07:38:14
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 138.121.181.245 (138.121.181.245.connectesite.c ...
show more
(mod_security) mod_security (id:225170) triggered by 138.121.181.245 (138.121.181.245.connectesite.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 03:38:06.845994 2025] [security2:error] [pid 18683:tid 18683] [client 138.121.181.245:33659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.athletefirst.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.athletefirst.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aPnbXszVJ4OEeGPU3NNbEgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-09-13 03:03:01
(10 months ago)
Attacks with Bad user agents
Hacking
🇳🇱
exxos
2025-08-19 06:03:01
(10 months ago)
http-no-verb
Hacking
🇪🇸
Global Cyber Police
2025-07-28 06:58:50
(11 months ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
glaserceramics
2025-04-05 13:47:02
(1 year ago)
GET /wp-login.php via HTTP/1.1 - User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11 ...
show more
GET /wp-login.php via HTTP/1.1 - User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
show less
Web App Attack
2025-01-05 08:32:17
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 18:23:58
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 138.121.181.245 (138.121.181.245.connectesite.c ...
show more
(mod_security) mod_security (id:225170) triggered by 138.121.181.245 (138.121.181.245.connectesite.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 14:23:52.898766 2024] [security2:error] [pid 24375:tid 24375] [client 138.121.181.245:46889] [client 138.121.181.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.wave94.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.wave94.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZrpTOLLuhr13lHrgwoLdtwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: