JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.97.162.70

138.97.162.70 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 79%: ?

79%

ISP	CASAVISION, S.A.
Usage Type	Fixed Line ISP
ASN	AS263751
Domain Name	casavision.com
Country	🇳🇮 Nicaragua
City	Managua, Managua Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.97.162.70

Whois 138.97.162.70

IP Abuse Reports for 138.97.162.70:

This IP address has been reported a total of 137 times from 65 distinct sources. 138.97.162.70 was first reported on January 28th 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-17 04:32:02 (10 hours ago)	WEB attack	Brute-Force
🇨🇿 unhfree.net	2026-09-17 03:28:33 (11 hours ago)	Sep 17 05:28:31 canopus postfix/smtpd[1411530]: NOQUEUE: reject: RCPT from unknown[138.97.162.70]: 5 ... show more Sep 17 05:28:31 canopus postfix/smtpd[1411530]: NOQUEUE: reject: RCPT from unknown[138.97.162.70]: 554 5.7.1 Service unavailable; Client host [138.97.162.70] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/138.97.162.70 / Listed by XBL, see https://check.spamhaus.org/query/ip/138.97.162.70; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 17 05:28:31 canopus postfix/smtpd[1411530]: NOQUEUE: reject: RCPT from unknown[138.97.162.70]: 554 5.7.1 Service unavailable; Client host [138.97.162.70] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/138.97.162.70 / Listed by XBL, see https://check.spamhaus.org/query/ip/138.97.162.70; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 17 05:28:32 canopus postfix/smtpd[1411530]: NOQUEUE: reject: RCPT from unknown[138.97.162.70]: 554 5.7.1 Service unavailable; Client host [138.97.162.70] blocked using ze ... show less	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-09-15 19:12:38 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 138.97.162.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 138.97.162.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:12:30.776528 2026] [security2:error] [pid 13346:tid 13346] [client 138.97.162.70:35832] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|circulodesonido.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "circulodesonido.org"] [uri "/"] [unique_id "aqmYntzR637m9CKaE3G3vwAAAA0"], referer: https://proyectovibra.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-15 16:09:38 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 68>=65, Abuse 67, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇺🇸 gui-ying233	2026-09-12 21:00:07 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 pixelmemory.us	2026-09-12 02:05:40 (5 days ago)	2026-09-12T01:51:43 138.97.162.70 GET /Photos/Vacation/2024-09%20Japan/raw/DSC07236.ARW Mozilla/5.0 ... show more 2026-09-12T01:51:43 138.97.162.70 GET /Photos/Vacation/2024-09%20Japan/raw/DSC07236.ARW Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇵🇱 MatStef132	2026-09-12 01:08:31 (5 days ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 gui-ying233	2026-09-10 23:02:55 (6 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-10 21:35:57 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-09 20:00:30 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 nyuuzyou	2026-09-08 07:13:23 (1 week ago)	Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ... show more Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T07:13:23Z. show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-07 20:08:22 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-07 00:18:01 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-06 18:07:37 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇫🇷 Tilellit.PRO	2026-09-04 02:48:51 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.168.123.73

🇧🇪 66.249.93.232

🇺🇦 31.43.49.180

🇸🇬 13.212.26.172

🇿🇼 216.234.215.187

🇵🇰 153.117.17.126

🇮🇳 103.168.177.246

🇳🇱 91.92.41.82

🇺🇸 40.121.179.100

🇲🇦 196.65.147.47

🇺🇸 172.190.113.61

🇮🇩 128.14.232.117

🇷🇺 95.108.213.109

🇨🇳 94.231.206.13

🇩🇪 69.5.169.156

🇺🇸 68.95.174.72

🇺🇸 20.80.78.99

🇧🇷 189.80.171.124

🇮🇩 103.10.120.8

🇦🇪 94.57.99.73