JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.124.67.59

Neutral Activity

Abuse Confidence Score

0% Low Risk

55 reports

32 reporters · latest 6 months ago

ISP: GLOBAL CONNECTIVITY SOLUTIONS LLP
Usage Type: Data Center/Web Hosting/Transit
ASN: AS215540
Domain Name: globconnex.com
Country: 🇳🇱 Netherlands
City: Kerkrade, Limburg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

138.124.67.59 has been reported 55 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

55 from 32 distinct reporters

First reported

April 3rd 2026

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-01 06:17:05 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=91, sources=1)	Hacking Brute-Force SSH
🇺🇸 helix	2026-04-17 14:39:32 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇩🇪 tall1oN	2026-04-04 16:30:28 UTC · (7 months ago)	2026-04-04T17:29:53.934477+01:00 towelie sshd-session[1641796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.67.59 2026-04-04T17:29:55.972708+01:00 towelie sshd-session[1641796]: Failed password for ... show more 2026-04-04T17:29:53.934477+01:00 towelie sshd-session[1641796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.67.59 2026-04-04T17:29:55.972708+01:00 towelie sshd-session[1641796]: Failed password for invalid user admin from 138.124.67.59 port 54534 ssh2 2026-04-04T17:30:27.861689+01:00 towelie sshd-session[1642290]: Invalid user orangepi from 138.124.67.59 port 43418 ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-04-04 16:25:04 UTC · (7 months ago)	Port Scan, tcp/80	Port Scan
Anonymous	2026-04-04 16:21:58 UTC · (7 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇿 Countryman	2026-04-04 16:20:26 UTC · (7 months ago)	IPS detection: Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking
🇭🇰 1stDim.org	2026-04-04 16:15:26 UTC · (7 months ago)	Apr 5 00:14:50 pve-hkg1 sshd[3004202]: Invalid user orangepi from 138.124.67.59 port 58948 Apr 5 00:14:50 pve-hkg1 sshd[3004202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.67.59 Apr 5 00:14:52 ... show more Apr 5 00:14:50 pve-hkg1 sshd[3004202]: Invalid user orangepi from 138.124.67.59 port 58948 Apr 5 00:14:50 pve-hkg1 sshd[3004202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.67.59 Apr 5 00:14:52 pve-hkg1 sshd[3004202]: Failed password for invalid user orangepi from 138.124.67.59 port 58948 ssh2 Apr 5 00:15:24 pve-hkg1 sshd[3009491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.67.59 user=root Apr 5 00:15:26 pve-hkg1 sshd[3009491]: Failed password for root from 138.124.67.59 port 49784 ssh2 ... show less	Brute-Force SSH
🇩🇪 igerman	2026-04-04 16:13:55 UTC · (7 months ago)	Apr 4 16:09:50 chungus sshd[661193]: Invalid user admin from 138.124.67.59 port 56168 Apr 4 16:10:20 chungus sshd[662517]: Invalid user orangepi from 138.124.67.59 port 57860 Apr 4 16:13:54 chungus sshd[671900]: Invalid user test from 138.124.67.5 ... show more Apr 4 16:09:50 chungus sshd[661193]: Invalid user admin from 138.124.67.59 port 56168 Apr 4 16:10:20 chungus sshd[662517]: Invalid user orangepi from 138.124.67.59 port 57860 Apr 4 16:13:54 chungus sshd[671900]: Invalid user test from 138.124.67.59 port 49248 show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-04-04 16:12:12 UTC · (7 months ago)	(mod_security) mod_security (id:218420) triggered by 138.124.67.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 12:12:09.055582 2026] [security2:error] [pid 4970:tid 4970] [client 138.124.67.59:38636] Mod ... show more (mod_security) mod_security (id:218420) triggered by 138.124.67.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 12:12:09.055582 2026] [security2:error] [pid 4970:tid 4970] [client 138.124.67.59:38636] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.237:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.237"] [uri "/hello.world"] [unique_id "adE4WVqS51tsjt-03-faOQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mauri64	2026-04-04 16:00:03 UTC · (7 months ago)	lfd - (sshd) Failed SSH login from 138.124.67.59 (-): 5 in the last 3600 secs	SSH
🇺🇸 RAP	2026-04-04 15:49:12 UTC · (7 months ago)	2026-04-04 15:49:12 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇮🇹 alph44	2026-04-04 15:45:56 UTC · (7 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇺🇸 paradoxnetworks	2026-04-04 15:44:03 UTC · (7 months ago)	2026-04-04T15:39:52.423812+00:00 edge-noc-mci01.int.pdx.net.uk sshd[567505]: Invalid user admin from 138.124.67.59 port 36660 2026-04-04T15:40:23.391762+00:00 edge-noc-mci01.int.pdx.net.uk sshd[567568]: Invalid user orangepi from 138.124.67.59 port 5 ... show more 2026-04-04T15:39:52.423812+00:00 edge-noc-mci01.int.pdx.net.uk sshd[567505]: Invalid user admin from 138.124.67.59 port 36660 2026-04-04T15:40:23.391762+00:00 edge-noc-mci01.int.pdx.net.uk sshd[567568]: Invalid user orangepi from 138.124.67.59 port 53882 2026-04-04T15:44:01.877923+00:00 edge-noc-mci01.int.pdx.net.uk sshd[567801]: Invalid user test from 138.124.67.59 port 48870 ... show less	Brute-Force SSH
🇵🇱 IROK	2026-04-04 15:40:47 UTC · (7 months ago)	Malware/WebShell Scan blocked by ModSecurity ...	Hacking
Anonymous	2026-04-04 15:36:57 UTC · (7 months ago)	$f2bV_matches	Brute-Force SSH

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 23.234.79.63

🇨🇳 222.223.62.8

🇨🇱 200.120.190.215

🇩🇪 185.207.139.24

🇺🇸 162.216.150.34

🇳🇱 138.226.239.234

🇨🇳 121.224.78.164

🇮🇳 103.189.89.196

🇿🇦 102.218.121.116

🇰🇿 92.47.46.174

🇺🇸 72.215.33.16

🇸🇬 34.124.144.43

🇺🇸 23.234.112.171

🇺🇸 23.234.108.209

🇺🇸 23.234.83.171

🇺🇸 173.249.255.126

🇺🇸 172.121.123.141

🇳🇴 158.173.166.22

🇺🇸 136.62.126.106

🇸🇬 101.47.12.168