JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.219.212.105

138.219.212.105 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 26%: ?

26%

ISP	GRUPO EQUIS S.A.
Usage Type	Fixed Line ISP
ASN	AS263822
Hostname(s)	105.212.219.138.dynamic.grupoequis.com.ar
Domain Name	grupoequis.com.ar
Country	🇦🇷 Argentina
City	Fray Luis Beltran, Rio Negro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.219.212.105

Whois 138.219.212.105

IP Abuse Reports for 138.219.212.105:

This IP address has been reported a total of 26 times from 18 distinct sources. 138.219.212.105 was first reported on July 26th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-03 13:43:51 (13 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-07-02 00:45:15 (2 days ago)	138.219.212.105 \| Port: 11933 \| DNS: 105.212.219.138.dynamic.grupoequis.com.ar 2026-07-02T08:45:15+0 ... show more 138.219.212.105 \| Port: 11933 \| DNS: 105.212.219.138.dynamic.grupoequis.com.ar 2026-07-02T08:45:15+08:00 America/Argentina/Salta \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/create/?466fe5d2dc96f19f7c1ad830cf45cb1e=1782342558 \| Ref: - \| Country: AR/Argentina/−03:00 IP City: Fray Luis Beltrán Windows a149a055dd557f1e-NQN/Neuquén, Argentina 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇨🇿 interconnect.cz	2026-05-25 16:16:48 (1 month ago)	[25/May/2026 18:16:48] IP address 138.219.212.105 found in DNS blacklist SpamHaus SBL-XBL, mail from ... show more [25/May/2026 18:16:48] IP address 138.219.212.105 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [25/May/2026 18:16:48] IP address 138.219.212.105 found in DNS blacklist SpamHaus SBL-XBL, mail from <[email protected]> to <[email protected]> [25/May/2026 18:16:48] Attempt to deliver to unknown recipient <[email protected]>, from <[email protected]>, IP address 138.219.212.105 ... show less	Brute-Force Email Spam
🇪🇸 librebit	2026-05-24 01:41:10 (1 month ago)	Postfix: Illegal address from unknown sender	Spoofing
🇪🇸 librebit	2026-05-22 05:51:20 (1 month ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇮🇩 hermawan	2026-05-21 04:17:03 (1 month ago)	[Thu May 21 11:17:02.761471 2026] [security2:error] [pid 600041:tid 139813614245568] [client 138.219 ... show more [Thu May 21 11:17:02.761471 2026] [security2:error] [pid 600041:tid 139813614245568] [client 138.219.212.105:45772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "624"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "ag6HPj9673w2sgB2_9yk6QACwQE"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[600043] [0fAbL4w68ww] [ag6HPj9673w2sgB2_9yk6QACwQE] keep_alive=[1] [2026-05-21 11:17:02.761476] [R:ag6HPj9673w2sgB2_9yk6QACwQE] UA:'Mozilla/5.0 (Linux; ... show less	Email Spam Hacking
Anonymous	2026-05-04 13:03:42 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 MAGIC	2026-03-19 01:03:35 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-09 14:56:09 (3 months ago)	(mod_security) mod_security (id:217210) triggered by 138.219.212.105 (105.212.219.138.dynamic.grupoe ... show more (mod_security) mod_security (id:217210) triggered by 138.219.212.105 (105.212.219.138.dynamic.grupoequis.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 10:56:05.208223 2026] [security2:error] [pid 4482:tid 4482] [client 138.219.212.105:33604] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|ca7sures.xyz\|F\|4"] [data "GET http://ca7sures.xyz HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ca7sures.xyz"] [uri "/"] [unique_id "aa7fhS60iH5BjX2OJIBQOwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-02-15 20:11:35 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-01-10 14:25:09 (5 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-17 20:00:01 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-16 07:55:35 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇷 Bruno	2025-10-27 12:10:21 (8 months ago)	Port Scanner: 138.219.212.105	Port Scan
🇨🇦 polycoda	2025-10-21 15:07:47 (8 months ago)	📡 Port scan	Hacking Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 212.32.76.28

🇺🇸 195.184.76.49

🇷🇴 193.46.255.86

🇺🇸 162.216.150.49

🇫🇮 147.185.133.95

🇨🇳 120.48.84.2

🇭🇰 103.243.24.124

🇮🇳 103.47.151.208

🇺🇸 64.62.156.130

🇳🇱 45.148.10.151

🇺🇸 40.119.40.156

🇰🇷 39.115.195.164

🇭🇰 152.32.226.102

🇪🇸 146.66.247.148

🇬🇧 81.102.69.40

🇺🇸 70.37.89.177

🇺🇸 68.235.61.155

🇬🇧 35.203.211.198

🇺🇸 20.65.194.105

🇩🇪 3.122.178.114