138.59.224.122

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
80% Critical
29 reports
27 reporters · latest 6 hours ago
ISP
STARTELECOM S.A.
Usage Type
Fixed Line ISP
ASN
AS270052
Domain Name
startpy.com.py
Country
🇵🇾 Paraguay
City
San Juan Bautista, Misiones Department
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇷🇺 Russian Federation 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2
Most common categories Port Scan 7 Hacking 6 Web App Attack 5 SSH 2 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 nandadytm
[2026-11-13 08:36:26] Banned 138.59.224.122 after 3 attempts: Portscan probe on TCP port 22,23
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇫🇮 6kilowatti
Web App Attack
🇷🇺 genokrad
Unauthorized connection try on TCP/23 (Telnet)
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 masterguru
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)
Hacking
Anonymous
Hacking Bad Web Bot
🇳🇱 Nrbrtkls
SSH honeypot (endlessh tarpit) connection from 138.59.224.122
SSH Port Scan
Anonymous
2026-11-09T07:59:30.434431+01:00 aion wordpress[1938622]: Blocked user enumeration attempt from 138.59.224.122 ...
Hacking Brute-Force
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
Anonymous
Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.
Web App Attack
🇨🇦 DRI
Web attack/Malicious activity detected
Web App Attack
🇬🇧 ISPLtd
138.59.224.122 - - [08/Nov/2026:08:19:14 -0400] "POST /wp-login.php 138.59.224.122 - - [08/Nov/2026:08:19:17 -0400] "GET /wp-login.php ...
Hacking Web App Attack
🇷🇺 genokrad
Unauthorized connection try on TCP/22 (SSH)
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 73.44.237.7
🇺🇸 205.210.31.102
🇺🇸 205.210.31.21
🇫🇷 178.20.31.252
🇵🇱 94.26.68.133
🇨🇳 42.94.70.113
🇦🇿 31.171.50.90
🇺🇸 3.93.147.70
🇦🇷 181.92.76.220
🇮🇩 114.12.29.243
🇧🇩 103.186.238.253
🇺🇸 100.34.124.117
🇺🇸 98.93.184.37
🇵🇱 57.128.239.181
🇺🇸 18.212.99.91
🇮🇷 5.74.164.7
🇺🇦 195.95.147.14
🇨🇳 183.158.93.101
🇷🇴 135.136.73.166
🇵🇱 94.26.68.131
feedback