138.84.63.166
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Starlink Argentina SRL
- Usage Type
- Fixed Line ISP
- ASN
- AS14593
- Hostname(s)
- customer.sntochl1.isp.starlink.com
- Domain Name
- starlink.com
- Country
- 🇦🇷 Argentina
- City
- Buenos Aires, Buenos Aires F.D.
Abuse Reports
Total reports
23 from
21 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 138.84.63.166: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇷🇺 Agrohim |
Gate Inet blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Brute-Force | |
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
|
Port Scan | |
| 🇩🇪 Ilop |
[v7-22] Blocked by os-abuseipdb; 12 hits, proto=tcp, ports=22,23, src_ip=138.84.63.166
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-09-05 04:53:41 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 138.84.63.166
|
Port Scan Brute-Force SSH | |
| Anonymous |
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:30058 dst:23
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇩🇪 klaus_ph |
138.84.63.166 - - [13/Aug/2026:05:39:02 +0200] "GET /lka/Record/c0004837/Description?lng=hi HTTP/1.1" 500 30050 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_7_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36"
...
|
Bad Web Bot | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 28044.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown