JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.59.191.95

138.59.191.95 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 14%: ?

14%

ISP	Pinheiro Net
Usage Type	Fixed Line ISP
ASN	AS264103
Domain Name	pinheironet.com.br
Country	🇧🇷 Brazil
City	Pilar, Alagoas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.59.191.95

Whois 138.59.191.95

IP Abuse Reports for 138.59.191.95:

This IP address has been reported a total of 3 times from 3 distinct sources. 138.59.191.95 was first reported on November 22nd 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HoneyPot-FrPri	2026-06-10 14:38:36 (23 hours ago)	1781102315 - 06/10/2026 16:38:35 Host: 138.59.191.95/138.59.191.95 Port: 139 TCP Blocked ...	Port Scan
🇺🇸 TPI-Abuse	2026-06-06 21:27:10 (4 days ago)	(mod_security) mod_security (id:217210) triggered by 138.59.191.95 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217210) triggered by 138.59.191.95 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 17:27:07.555313 2026] [security2:error] [pid 9841:tid 9841] [client 138.59.191.95:41438] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.giveorcas.org\|F\|4"] [data "GET http://www.giveorcas.org HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.giveorcas.org"] [uri "/"] [unique_id "aiSQqxJIj0bmIXxWm2JIkgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-22 08:10:20 (6 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 65.111.27.87

🇺🇸 20.80.83.86

🇩🇪 217.181.91.238

🇩🇪 209.50.183.115

🇻🇳 180.93.43.225

🇱🇹 141.98.9.39

🇮🇳 135.235.138.43

🇫🇷 104.253.219.211

🇺🇸 47.251.85.219

🇩🇪 45.3.54.146

🇩🇪 45.3.54.107

🇺🇸 45.3.37.192

🇩🇴 38.56.21.66

🇻🇳 14.225.217.138

🇩🇪 194.187.176.118

🇬🇧 193.163.125.181

🇨🇳 183.150.182.61

🇺🇸 172.110.223.97

🇺🇸 165.227.196.13

🇮🇳 139.59.58.140