JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.59.227.208

138.59.227.208 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 3%: ?

ISP	STARTELECOM S.A.
Usage Type	Fixed Line ISP
ASN	AS270052
Domain Name	startpy.com.py
Country	🇵🇾 Paraguay
City	Concepcion, Concepcion

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.59.227.208

Whois 138.59.227.208

IP Abuse Reports for 138.59.227.208:

This IP address has been reported a total of 7 times from 4 distinct sources. 138.59.227.208 was first reported on August 2nd 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-06 14:52:42 (1 week ago)	[Sat Jun 06 21:52:38.658968 2026] [security2:error] [pid 70381:tid 140594216158912] [client 138.59.2 ... show more [Sat Jun 06 21:52:38.658968 2026] [security2:error] [pid 70381:tid 140594216158912] [client 138.59.227.208:46112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aiQ0Nlt_TeGY8z0D9JDVkQAAkwQ"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[70386] [O9Sn7daIm7w] [aiQ0Nlt_TeGY8z0D9JDVkQAAkwQ] keep_alive=[1 ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2026-03-03 23:42:49 (3 months ago)	(mod_security) mod_security (id:218580) triggered by 138.59.227.208 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218580) triggered by 138.59.227.208 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 18:42:42.340259 2026] [security2:error] [pid 6132:tid 6132] [client 138.59.227.208:46944] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:previews. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.oualierealty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.oualierealty.com"] [uri "/index.php"] [unique_id "aadx8mDTJj-aiYj-NGyrpQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Pingger Shikkoken	2023-11-13 19:13:46 (2 years ago)	Participating in DDoS Amplification Attack! Sending 61 requests over 72919s asking for ?0? of cisco. ... show more Participating in DDoS Amplification Attack! Sending 61 requests over 72919s asking for ?0? of cisco.com, apple.com, atlassian.com show less	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host
🇩🇪 Pingger Shikkoken	2023-11-12 19:51:15 (2 years ago)	Participating in DDoS Amplification Attack! Sending 61 requests over 70090s asking for ?0? of cisco. ... show more Participating in DDoS Amplification Attack! Sending 61 requests over 70090s asking for ?0? of cisco.com, apple.com, atlassian.com show less	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host
🇩🇪 Pingger Shikkoken	2023-11-11 20:32:31 (2 years ago)	Participating in DDoS Amplification Attack! Sending 17 requests over 2369s asking for ?0? of cisco.c ... show more Participating in DDoS Amplification Attack! Sending 17 requests over 2369s asking for ?0? of cisco.com, atlassian.com, apple.com show less	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host
🇩🇪 Pingger Shikkoken	2023-11-11 15:39:10 (2 years ago)	Participating in DDoS Amplification Attack Nov 11 15:39:10 dnsmasq[526675]: query[TXT] cisco.com fro ... show more Participating in DDoS Amplification Attack Nov 11 15:39:10 dnsmasq[526675]: query[TXT] cisco.com from 138.59.227.208 show less	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host
🇲🇾 syokadmin	2021-08-02 20:32:57 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 138.59.227.208 (FR/France/-): 1 in the last 360 ... show more (mod_security) mod_security (id:949110) triggered by 138.59.227.208 (FR/France/-): 1 in the last 3600 secs show less	Brute-Force

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇨🇳 182.43.235.218

🇩🇿 154.241.96.227

🇫🇷 91.231.89.95

🇺🇸 205.210.31.64

🇮🇳 198.38.85.149

🇰🇿 178.88.112.170

🇫🇮 178.20.210.152

🇮🇳 160.202.38.204

🇺🇸 147.182.189.248

🇮🇳 103.30.80.57

🇳🇱 45.148.10.147

🇻🇳 42.96.19.37

🇺🇸 35.253.28.117

🇺🇸 208.87.243.251

🇧🇷 186.237.174.8

🇳🇴 185.12.59.118

🇳🇱 176.65.148.135

🇺🇸 165.154.135.222

🇨🇳 115.191.66.84