JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.255.179.108

138.255.179.108 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 27%: ?

27%

ISP	CYBERNETRS LTDA - ME
Usage Type	Fixed Line ISP
ASN	AS263979
Domain Name	cybernetrs.com.br
Country	🇧🇷 Brazil
City	Porto Alegre, Rio Grande do Sul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.255.179.108

Whois 138.255.179.108

IP Abuse Reports for 138.255.179.108:

This IP address has been reported a total of 19 times from 15 distinct sources. 138.255.179.108 was first reported on March 3rd 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-10-15 16:04:22 (1 day ago)	138.255.179.108 - - [15/Oct/2026:12:01:08 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5310 "-" "WordPress ... show more 138.255.179.108 - - [15/Oct/2026:12:01:08 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5310 "-" "WordPress.com; https://wordpress.com" 138.255.179.108 - - [15/Oct/2026:12:01:40 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5310 "-" "WordPress.com; https://wordpress.com" 138.255.179.108 - - [15/Oct/2026:12:02:34 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5310 "-" "WordPress.com; https://wordpress.com" 138.255.179.108 - - [15/Oct/2026:12:04:10 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5310 "-" "WordPress.com; https://wordpress.com" 138.255.179.108 - - [15/Oct/2026:12:04:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5310 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-10-15 13:10:05 (1 day ago)	[PathScanning] Path scanning/probing detected: WordPress system file probe (path: /xmlrpc.php) \| [Xm ... show more [PathScanning] Path scanning/probing detected: WordPress system file probe (path: /xmlrpc.php) \| [XmlRpc] XML-RPC abuse detected: XML-RPC endpoint probe (GET) show less	Port Scan Hacking Brute-Force Web App Attack
Anonymous	2026-10-15 12:54:59 (1 day ago)	[PathScanning] Path scanning/probing detected: WordPress system file probe (path: /xmlrpc.php) \| [Xm ... show more [PathScanning] Path scanning/probing detected: WordPress system file probe (path: /xmlrpc.php) \| [XmlRpc] XML-RPC abuse detected: POST request to xmlrpc.php; Dangerous XML-RPC method: metaWeblog.newPost show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 鬼影233	2026-09-23 15:33:43 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-08-27 02:25:47 (1 month ago)	2026-08-27T02:23:14 138.255.179.108 GET /Photos/Family/2014-10-05%20Jessica%20Baby%20Shower/raw/IMG_ ... show more 2026-08-27T02:23:14 138.255.179.108 GET /Photos/Family/2014-10-05%20Jessica%20Baby%20Shower/raw/IMG_9347.CR2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 14:32:53 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-19 02:13:30 (1 month ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /116-vtt \| query: q=Famille-Gambler-Laufey-Occam+LT-Genius show less	DDoS Attack Web App Attack
Anonymous	2026-08-14 22:29:25 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 Cherryh4ck	2026-08-10 01:04:39 (2 months ago)	Blocked by UFW [25565/tcp] \| SPT: 37147 \| TTL: 119 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/s ... show more Blocked by UFW [25565/tcp] \| SPT: 37147 \| TTL: 119 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-08-01 04:00:26 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-14 17:42:37 (4 months ago)	[Mon Jun 15 00:42:33.643041 2026] [security2:error] [pid 288918:tid 139672945645248] [client 138.255 ... show more [Mon Jun 15 00:42:33.643041 2026] [security2:error] [pid 288918:tid 139672945645248] [client 138.255.179.108:55085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "ai7oCbdVtg3JOFURN4cDAQABkwk"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[288942] [3XoMPHo0T0A] [ai7oCbdVtg3JOFURN4cDAQABkwk] keep_alive=[1] [2026 ... show less	Email Spam Hacking
🇺🇸 quilla	2026-03-28 23:35:00 (6 months ago)	Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)	DDoS Attack
Anonymous	2026-03-14 21:22:42 (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 Sklurk	2025-12-15 14:48:28 (10 months ago)	Web App Attack	Web App Attack
Anonymous	2025-11-26 09:49:39 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 95.90.13.168

🇨🇳 221.229.218.50

🇬🇧 206.189.117.30

🇮🇳 185.100.212.141

🇮🇩 163.52.135.4

🇵🇰 153.117.4.117

🇨🇳 139.196.103.75

🇳🇱 109.160.32.158

🇵🇱 94.26.88.90

🇩🇪 91.92.34.242

🇧🇬 79.124.49.90

🇺🇸 20.40.251.38

🇧🇪 198.235.24.180

🇲🇽 189.194.140.170

🇺🇸 172.203.149.63

🇺🇸 141.148.165.230

🇮🇳 122.183.32.55

🇳🇬 102.88.137.145

🇮🇳 52.140.76.154

🇸🇬 47.237.207.205