AbuseIPDB » 138.99.165.171
138.99.165.171
This IP was reported 2 times. Confidence of
Abuse
is 4% : ?
ISP
A C Gomes-ME
Usage Type
Fixed Line ISP
ASN
AS264211
Hostname(s)
138-99-165-171.zecnet.com.br
Domain Name
zecnet.com.br
Country
🇧🇷
Brazil
City
Mossoro, Rio Grande do Norte
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 138.99.165.171 :
This IP address has been reported a total of
2
times from
2 distinct
sources.
138.99.165.171 was first reported on
June 23rd 2026 , and the most recent report was
5 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-24 17:32:58
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 138.99.165.171 (138-99-165-171.zecnet.com.br): ...
show more
(mod_security) mod_security (id:210350) triggered by 138.99.165.171 (138-99-165-171.zecnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:32:50.213302 2026] [security2:error] [pid 7570:tid 7570] [client 138.99.165.171:40383] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||xcengineering.xyz|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "xcengineering.xyz"] [uri "/doxygen_doc/html/group___e_q_sol_algo.html"] [unique_id "arVewmfwsjq_8P7TblFb4QAAAAg"], referer: https://xcengineering.xyz/doxygen_doc/html/class_x_c_1_1_equi_soln_algo.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-06-23 04:56:29
(3 months ago)
[Tue Jun 23 11:56:25.501637 2026] [security2:error] [pid 81180:tid 140203594331840] [client 138.99.1 ...
show more
[Tue Jun 23 11:56:25.501637 2026] [security2:error] [pid 81180:tid 140203594331840] [client 138.99.165.171:39170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-S926U1 Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "ajoR-WUX4W6kGD_3BXiv5gAAVgM"], referer https://s
...
show less
Email Spam
Hacking
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: