JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.121.114.139

Recent Activity

Abuse Confidence Score

53% Elevated

105 reports

44 reporters · latest 1 day ago

ISP: Imperio Verde SRL
Usage Type: Fixed Line ISP
ASN: AS263791
Domain Name: refsatel.com.ar
Country: 🇦🇷 Argentina
City: Laguna Naick-Neck, Formosa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

105 from 44 distinct reporters

First reported

September 18th 2024

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 21 🇩🇪 Germany 4 🇫🇷 France 2

Most common categories Bad Web Bot 24 Web App Attack 11 DDoS Attack 7 Brute-Force 5 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-11-03 12:08:02 (1 day ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=58&topics%5B2%5D=36&topics%5B3%5D=28&topics%5B4%5D=29 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=58&topics%5B2%5D=36&topics%5B3%5D=28&topics%5B4%5D=29 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 nyuuzyou	2026-11-01 21:50:56 (2 days ago)	Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T21:50:56Z.	Bad Web Bot
🇺🇸 francelink.fr	2026-10-30 18:38:28 (5 days ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T18:36:24.000Z.	Web App Attack
🇺🇸 francelink.fr	2026-10-29 05:29:29 (6 days ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T05:27:53.000Z.	Web App Attack
🇫🇷 Tilellit.PRO	2026-10-28 05:30:46 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 francelink.fr	2026-10-25 09:43:31 (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-25T01:43:54.000Z.	Web App Attack
🇺🇸 francelink.fr	2026-10-24 19:33:27 (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T05:43:00.000Z.	Web App Attack
🇩🇪 LRob	2026-10-22 02:56:23 (1 week ago)	Code forge crawl (headless) \| path: /Shieldlist/shieldlist-controller/commits/commit/5c45e0ae5c9c6202eb0c3e1fc26e124aeb3c4aba/internal/tlsutil \| src_port: 37562 \| 2026-10-22 02:56 UTC	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2026-10-10 19:40:26 (3 weeks ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2026-10-07 10:22:34 (4 weeks ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp	Exploited Host Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-04 04:02:34 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 138.121.114.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:02:28.514663 2026] [security2:error] [pid 1941117:tid 1941136] [client 138.121.114.139: ... show more (mod_security) mod_security (id:210350) triggered by 138.121.114.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:02:28.514663 2026] [security2:error] [pid 1941117:tid 1941136] [client 138.121.114.139:45216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|oldramona.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oldramona.com"] [uri "/"] [unique_id "asHP1FLydqKnEXs-UUa6hgAAAAw"], referer: https://freeseobacklinks.site/dir/high-da-backlinks-153268 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-03 12:00:29 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 138.121.114.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:00:23.397418 2026] [security2:error] [pid 23867:tid 23867] [client 138.121.114.139:5083 ... show more (mod_security) mod_security (id:210350) triggered by 138.121.114.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:00:23.397418 2026] [security2:error] [pid 23867:tid 23867] [client 138.121.114.139:50836] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|napaautopartskeokuk.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "napaautopartskeokuk.com"] [uri "/"] [unique_id "asDuVw021bvp3qRZrsxfzgAAABc"], referer: https://backlinktool.site/dir/manual-seo-backlinks-145115 show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-10-03 01:13:13 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-10-01 15:43:32 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 09:46:46 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 115.178.75.242

🇨🇷 190.113.115.120

🇺🇸 172.236.112.145

🇨🇦 172.69.214.238

🇩🇪 165.245.208.67

🇨🇳 117.72.66.172

🇨🇳 106.75.174.230

🇪🇸 104.22.139.63

🇦🇱 104.22.28.138

🇳🇱 93.123.109.80

🇳🇱 77.91.71.11

🇱🇹 77.90.185.20

🇩🇪 69.5.169.13

🇸🇬 68.178.164.156

🇺🇸 45.132.187.238

🇵🇪 38.25.83.61

🇮🇪 4.210.91.174

🇧🇷 200.52.228.115

🇸🇪 193.235.141.17

🇲🇽 187.228.249.198