JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.84.53.47

Neutral Activity

Abuse Confidence Score

0% Low Risk

185 reports

121 reporters · latest 1 month ago

ISP: Starlink Colombia S.A.S.
Usage Type: Fixed Line ISP
ASN: AS14593
Hostname(s): customer.bgtacol1.isp.starlink.com
Domain Name: starlink.com
Country: 🇨🇴 Colombia
City: Bogota, Bogota D.C.

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

185 from 121 distinct reporters

First reported

January 27th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Brute-Force 1 Web App Attack 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-27 11:43:19 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 138.84.53.47 (customer.bgtacol1.isp.starlink.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 07:43:11.973454 2026] [security2:error] [pid 11988:tid 11988 ... show more (mod_security) mod_security (id:210350) triggered by 138.84.53.47 (customer.bgtacol1.isp.starlink.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 07:43:11.973454 2026] [security2:error] [pid 11988:tid 11988] [client 138.84.53.47:19431] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|aparthistory.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aparthistory.com"] [uri "/"] [unique_id "arkBT9jAn50VVkLa2vtHVQAAAA8"], referer: https://bestdachecker.store/dir/white-hat-link-building-11065 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-08-20 14:56:07 UTC · (2 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 kosada.com	2026-08-11 02:07:44 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-24 01:02:38 UTC · (3 months ago)	denied traffic to a honeypot network. destination port 41046.	Port Scan Hacking
🇩🇪 Hazzard	2026-04-05 03:50:33 UTC · (7 months ago)	138.84.53.47 (CO/Colombia/Bogota D.C./Bogotá/customer.bgtacol1.isp.starlink.com/[redacted]	Brute-Force
Anonymous	2026-04-04 01:10:28 UTC · (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 Vegascosmetics	2026-03-04 22:51:05 UTC · (8 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2026-02-04 16:11:23 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-01-30 00:36:47 UTC · (9 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/138.84.53.47	SSH
🇹🇷 rtbh.com.tr	2026-01-29 20:11:17 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2026-01-29 08:08:09 UTC · (9 months ago)	(sshd) Failed SSH login from 138.84.53.47 (CO/Colombia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 29 02:05:51 14568 sshd[19337]: Invalid user ks from 138.84.53.47 port 4697 Jan 29 02:05:53 14568 sshd[19337]: Fail ... show more (sshd) Failed SSH login from 138.84.53.47 (CO/Colombia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 29 02:05:51 14568 sshd[19337]: Invalid user ks from 138.84.53.47 port 4697 Jan 29 02:05:53 14568 sshd[19337]: Failed password for invalid user ks from 138.84.53.47 port 4697 ssh2 Jan 29 02:07:08 14568 sshd[19549]: Invalid user karina from 138.84.53.47 port 20952 Jan 29 02:07:10 14568 sshd[19549]: Failed password for invalid user karina from 138.84.53.47 port 20952 ssh2 Jan 29 02:08:05 14568 sshd[19664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.53.47 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-29 07:38:47 UTC · (9 months ago)	(sshd) Failed SSH login from 138.84.53.47 (CO/Colombia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 29 01:36:24 14658 sshd[10021]: Invalid user pavel from 138.84.53.47 port 32345 Jan 29 01:36:26 14658 sshd[10021]: ... show more (sshd) Failed SSH login from 138.84.53.47 (CO/Colombia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 29 01:36:24 14658 sshd[10021]: Invalid user pavel from 138.84.53.47 port 32345 Jan 29 01:36:26 14658 sshd[10021]: Failed password for invalid user pavel from 138.84.53.47 port 32345 ssh2 Jan 29 01:37:46 14658 sshd[10189]: Invalid user william from 138.84.53.47 port 47076 Jan 29 01:37:48 14658 sshd[10189]: Failed password for invalid user william from 138.84.53.47 port 47076 ssh2 Jan 29 01:38:41 14658 sshd[10355]: Invalid user g from 138.84.53.47 port 63025 show less	Brute-Force SSH
🇩🇪 hserv	2026-01-29 07:10:30 UTC · (9 months ago)	2026-01-29T09:06:37.246446+02:00 topah03 sshd[2624863]: Invalid user mongodb from 138.84.53.47 port 57103 2026-01-29T09:07:49.691458+02:00 topah03 sshd[2627556]: Invalid user registry from 138.84.53.47 port 51342 2026-01-29T09:08:43.528720+02:00 topa ... show more 2026-01-29T09:06:37.246446+02:00 topah03 sshd[2624863]: Invalid user mongodb from 138.84.53.47 port 57103 2026-01-29T09:07:49.691458+02:00 topah03 sshd[2627556]: Invalid user registry from 138.84.53.47 port 51342 2026-01-29T09:08:43.528720+02:00 topah03 sshd[2629098]: Invalid user flink from 138.84.53.47 port 35989 2026-01-29T09:09:35.369454+02:00 topah03 sshd[2631782]: Invalid user gmod from 138.84.53.47 port 8396 2026-01-29T09:10:29.390979+02:00 topah03 sshd[2634288]: Invalid user jake from 138.84.53.47 port 36302 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-29 07:08:45 UTC · (9 months ago)	(sshd) Failed SSH login from 138.84.53.47 (CO/Colombia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 29 01:05:57 15581 sshd[15185]: Invalid user mongodb from 138.84.53.47 port 31153 Jan 29 01:05:59 15581 sshd[15185] ... show more (sshd) Failed SSH login from 138.84.53.47 (CO/Colombia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 29 01:05:57 15581 sshd[15185]: Invalid user mongodb from 138.84.53.47 port 31153 Jan 29 01:05:59 15581 sshd[15185]: Failed password for invalid user mongodb from 138.84.53.47 port 31153 ssh2 Jan 29 01:07:29 15581 sshd[15466]: Invalid user registry from 138.84.53.47 port 17839 Jan 29 01:07:32 15581 sshd[15466]: Failed password for invalid user registry from 138.84.53.47 port 17839 ssh2 Jan 29 01:08:24 15581 sshd[15639]: Invalid user flink from 138.84.53.47 port 10092 show less	Brute-Force SSH
🇺🇸 sh97	2026-01-29 07:08:18 UTC · (9 months ago)	US906-ENZ-NYC: SSH Brute Force from 138.84.53.47 at 2026-01-29 07:07:01 GMT	Brute-Force SSH

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.231

🇨🇴 206.62.142.35

🇪🇹 196.191.142.67

🇳🇱 193.47.62.20

🇵🇰 153.117.69.171

🇬🇷 149.102.246.5

🇵🇭 143.44.145.21

🇫🇷 141.101.68.90

🇳🇱 118.91.187.16

🇺🇸 104.28.92.207

🇺🇸 100.29.192.100

🇮🇹 93.70.89.150

🇷🇺 83.234.183.128

🇲🇽 82.152.133.156

🇨🇳 47.120.30.67

🇳🇱 45.148.10.141

🇪🇸 34.175.212.250

🇳🇱 213.209.159.26

🇲🇽 187.190.35.163

🇳🇱 176.65.132.107