138.121.104.227
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- RED POWER INTERNET SRL
- Usage Type
- Fixed Line ISP
- ASN
- AS263790
- Hostname(s)
- static-ip-138-121-104-227.redpower.com.ar
- Domain Name
- redpower.com.ar
- Country
- 🇦🇷 Argentina
- City
- Junin, Buenos Aires
Abuse Reports
Total reports
104 from
53 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 AbuseIPDB informer |
nfdump top talker: 138.121.104.227 | first seen 2026-10-15 19:19:05 | duration 57.856s | flows=24 | packets=106392 | bytes=141288576 | pps=1838 | bps=19536584 | bpp=1328 | proto=udp
|
DDoS Attack Port Scan Exploited Host | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 22)
Source port: 16839
TTL: 51
Packet length: 60
TOS: 0x00
This report (for 138.121.104.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH Brute-Force | |
| 🇺🇸 thefuzz4 |
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22, held 33 minute(s). Automated report.
|
Brute-Force SSH | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| Anonymous |
IP & Port Scan.
|
SSH Port Scan Brute-Force | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 138.121.104.227
|
Port Scan Brute-Force SSH | |
| Anonymous |
Unauthorized connection to SSH port 22
|
Port Scan SSH | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-09-25 19:28:15 | LAST=2026-09-25 19:28:16. Last seen 2026-09-25 19:28:16.
|
Port Scan | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown