JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.59.121.71

138.59.121.71 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 41%: ?

41%

ISP	GIGA MAIS FIBRA TELECOMUNICACOES S.A.
Usage Type	Fixed Line ISP
ASN	AS28210
Hostname(s)	138-59-121-71.static.sumicity.net.br
Domain Name	gigamaisfibra.com.br
Country	🇧🇷 Brazil
City	Rio das Ostras, Rio de Janeiro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.59.121.71

Whois 138.59.121.71

IP Abuse Reports for 138.59.121.71:

This IP address has been reported a total of 18 times from 13 distinct sources. 138.59.121.71 was first reported on October 16th 2023, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 12:54:27 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 138.59.121.71 (138-59-121-71.static.sumicity.ne ... show more (mod_security) mod_security (id:240335) triggered by 138.59.121.71 (138-59-121-71.static.sumicity.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 08:54:19.315863 2026] [security2:error] [pid 766549:tid 766549] [client 138.59.121.71:25347] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 138.59.121.71 (+1 hits since last alert)\|hookedupfishing.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hookedupfishing.net"] [uri "/xmlrpc.php"] [unique_id "amIO-w759Ss1chQQC579qQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-23 12:44:20 (22 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-07-23 12:28:20 (22 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-22 19:39:13 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BR/Brazil/138-59-121-71.static.sumicity.net.br	Web App Attack
Anonymous	2026-07-22 19:08:02 (1 day ago)	(wordpress) Failed wordpress login from 138.59.121.71 (BR/Brazil/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-22 18:11:22 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 138.59.121.71 (138-59-121-71.static.sumicity.ne ... show more (mod_security) mod_security (id:240335) triggered by 138.59.121.71 (138-59-121-71.static.sumicity.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:11:17.576718 2026] [security2:error] [pid 1418625:tid 1418625] [client 138.59.121.71:25180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 138.59.121.71 (+1 hits since last alert)\|csm-dtc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "csm-dtc.com"] [uri "/xmlrpc.php"] [unique_id "amEHxVhF6pR-OiOtHDvp1gAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 16:39:32 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 138.59.121.71 (138-59-121-71.static.sumicity.ne ... show more (mod_security) mod_security (id:240335) triggered by 138.59.121.71 (138-59-121-71.static.sumicity.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 12:39:24.184716 2026] [security2:error] [pid 10942:tid 10942] [client 138.59.121.71:25332] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 138.59.121.71 (+1 hits since last alert)\|learnserve.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "learnserve.net"] [uri "/xmlrpc.php"] [unique_id "amDyPIieAhzNywwOstBAJQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 16:35:20 (1 day ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=www.physio-kinisi.gr; logs=/var/log/httpd/domains/physio-ki ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=www.physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kinisi.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-07-22 15:46:22 (1 day ago)	138.59.121.71 - - [22/Jul/2026:11:44:37 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.c ... show more 138.59.121.71 - - [22/Jul/2026:11:44:37 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 138.59.121.71 - - [22/Jul/2026:11:45:29 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 138.59.121.71 - - [22/Jul/2026:11:45:42 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 138.59.121.71 - - [22/Jul/2026:11:46:08 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 138.59.121.71 - - [22/Jul/2026:11:46:21 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-03-31 04:50:34 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2025-11-22 13:22:17 (8 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 botreporter	2025-05-18 02:10:00 (1 year ago)	botnet ignoring robots.txt 2	Bad Web Bot
🇺🇸 ipblock.com	2025-03-03 06:10:00 (1 year ago)	IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Ma ... show more IPBlock protected site ID [4055-d][s=02]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/87.0.4280.90 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2025-03-02 04:59:00 (1 year ago)	IPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Ma ... show more IPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/85.0.4183.122 Safari/537.36 show less	Bad Web Bot
🇲🇾 syokadmin	2025-02-14 22:15:04 (1 year ago)	(cpanel) Failed cPanel login from 138.59.121.71 (BR/Brazil/138-59-121-71.static.sumicity.net.br): 1 ... show more (cpanel) Failed cPanel login from 138.59.121.71 (BR/Brazil/138-59-121-71.static.sumicity.net.br): 1 in the last 3600 secs show less	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.253.1.222

🇨🇳 14.103.114.195

🇨🇴 190.99.144.227

🇺🇸 185.150.190.165

🇸🇬 165.154.236.29

🇺🇸 162.216.149.74

🇺🇸 47.254.74.209

🇺🇸 47.252.16.44

🇸🇬 47.82.11.173

🇳🇱 45.148.10.141

🇲🇽 206.135.24.10

🇸🇬 172.104.55.33

🇺🇸 162.216.149.3

🇵🇱 149.13.96.133

🇺🇸 45.156.131.23

🇹🇿 154.66.226.207

🇮🇳 124.253.88.231

🇨🇳 120.195.35.240

🇰🇷 222.98.44.218

🇨🇳 124.95.146.204