JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.59.142.8

138.59.142.8 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 67%: ?

67%

ISP	Grupo Fullsat SRL
Usage Type	Fixed Line ISP
ASN	AS263737
Domain Name	optimix.com.ar
Country	🇦🇷 Argentina
City	Lanus, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.59.142.8

Whois 138.59.142.8

IP Abuse Reports for 138.59.142.8:

This IP address has been reported a total of 47 times from 36 distinct sources. 138.59.142.8 was first reported on August 29th 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 20:51:41 (6 hours ago)	(mod_security) mod_security (id:210350) triggered by 138.59.142.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 138.59.142.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:51:33.846049 2026] [security2:error] [pid 20802:tid 20802] [client 138.59.142.8:45813] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|guitarsouth.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guitarsouth.com"] [uri "/"] [unique_id "aq2kVcfE4qA2Zh4KLNIVBAAAABI"], referer: https://quickseochecker.space/dir/natural-seo-backlinks-87134 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 18:55:42 (8 hours ago)	(mod_security) mod_security (id:210350) triggered by 138.59.142.8 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 138.59.142.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 14:55:37.617427 2026] [security2:error] [pid 27796:tid 27796] [client 138.59.142.8:37480] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|buildpower.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "buildpower.com"] [uri "/"] [unique_id "aq2JKb286CQycEPJgAs5EwAAABI"], referer: https://backlinkscheckers.store/dir/contextual-seo-backlinks-30517 show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 urnilxfgbez	2026-08-31 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 cwytech	2026-08-26 20:19:15 (3 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇫🇷 Lat31320	2026-08-26 13:14:12 (3 weeks ago)	gate - SSH brute force ...	Brute-Force SSH
🇺🇸 kosada.com	2026-08-26 11:00:21 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 FD-IX	2026-08-26 00:29:46 (3 weeks ago)	Fail2Ban: Automated WooCommerce filter abuse from distributed botnet activity.	Bad Web Bot
🇧🇷 noconex	2026-08-25 01:17:09 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 138.59.142 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 138.59.142.8 show less	Port Scan Brute-Force SSH
🇸🇬 garrymenata	2026-08-23 18:01:39 (3 weeks ago)	138.59.142.8 - - [24/Aug/2026:00:46:16 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; ... show more 138.59.142.8 - - [24/Aug/2026:00:46:16 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 138.59.142.8 - - [24/Aug/2026:00:46:17 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 138.59.142.8 - - [24/Aug/2026:00:46:19 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-08-23 02:08:30 (3 weeks ago)	tcp ports: 23,22 (20 or more attempts)	Port Scan
🇧🇾 sashan	2026-08-21 23:32:55 (4 weeks ago)	2026-08-22T02:31:15.257124+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=138.59.142.8 D ... show more 2026-08-22T02:31:15.257124+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=138.59.142.8 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=50007 DF PROTO=TCP SPT=49998 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-20 15:50:22 (4 weeks ago)	Port Scan Attack proto:TCP src:44534 dst:23	Port Scan
Anonymous	2026-08-20 09:55:57 (4 weeks ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan
🇺🇸 RAP	2026-08-20 08:30:26 (4 weeks ago)	2026-08-20 08:30:26 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇧🇷 noconex	2026-08-20 00:27:13 (4 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 138.59.142 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 138.59.142.8 show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 194.230.137.87

🇩🇪 194.99.85.71

🇭🇰 125.215.199.37

🇫🇷 90.28.122.40

🇬🇧 51.195.215.127

🇸🇪 217.208.90.253

🇹🇼 203.204.135.118

🇨🇳 202.46.62.91

🇲🇽 201.141.96.4

🇻🇪 190.89.31.131

🇩🇪 149.88.102.122

🇭🇰 118.26.39.231

🇺🇸 91.230.168.57

🇸🇪 82.196.111.156

🇱🇹 62.60.130.253

🇬🇧 51.195.215.170

🇲🇲 45.125.4.195

🇺🇸 45.33.14.197

🇲🇾 27.131.55.226

🇭🇰 8.217.174.148