JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.99.223.8

138.99.223.8 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 31%: ?

31%

ISP	AGRUPACION DE PROVEEDORES DE SERVICIOS
Usage Type	Fixed Line ISP
ASN	AS265738
Hostname(s)	138-99-223-8.enlineasa.com.ar
Domain Name	somtik.com
Country	🇦🇷 Argentina
City	San Benito, Entre Rios

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.99.223.8

Whois 138.99.223.8

IP Abuse Reports for 138.99.223.8:

This IP address has been reported a total of 33 times from 25 distinct sources. 138.99.223.8 was first reported on January 18th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-23 13:08:15 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 14:12:06 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-08-20 01:17:08 (1 week ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /20-velo-gravel \| query: q=Taille-XS%2FMarque-Orbea&resultsPerPage=99999 show less	DDoS Attack Web App Attack
🇫🇷 Jimbo67	2026-08-14 03:52:48 (2 weeks ago)	Cloudflare WAF: 1 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19 \| rule_id=3329 ... show more Cloudflare WAF: 1 hits in 30s \| action=block \| abuse=suspicious_probe \| categories=19 \| rule_id=3329c9d804134f3e89780d69bfd872dc \| URIs=/ \| confidence=0.82 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-07 00:18:51 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-22 15:09:21 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-11 15:41:37 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 15:29:01 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-04-21 22:34:46 (4 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 MusicLibrary	2026-04-13 18:06:46 (4 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-03 05:15:53 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 138.99.223.8 (138-99-223-8.enlineasa.com.ar): 1 ... show more (mod_security) mod_security (id:210492) triggered by 138.99.223.8 (138-99-223-8.enlineasa.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 01:15:45.168108 2026] [security2:error] [pid 16269:tid 16269] [client 138.99.223.8:59494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.et.lobibilisim.com"] [uri "/vendor/symfony/process/composer.json"] [unique_id "ac9NAcah-qy_-bXWNTygYQAAAAQ"], referer: https://www.et.lobibilisim.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-03-05 16:33:40 (5 months ago)	invalid/bad user agent - possible botnet ...	Bad Web Bot
🇱🇻 garmtech.com	2025-12-29 17:24:19 (7 months ago)	IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.php.orig	Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 06:44:37 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 138.99.223.8 (138-99-223-8.enlineasa.com.ar): 1 ... show more (mod_security) mod_security (id:210730) triggered by 138.99.223.8 (138-99-223-8.enlineasa.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 01:44:33.362381 2025] [security2:error] [pid 18294:tid 18294] [client 138.99.223.8:52346] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gadgeteer.net\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gadgeteer.net"] [uri "/geekly.com"] [unique_id "aVDR0dx4wpm_u3wIaOHujwAAABI"], referer: http://www.gadgeteer.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2025-12-24 04:34:26 (8 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.541 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.541 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.243

🇬🇧 195.96.139.223

🇬🇧 195.96.139.74

🇳🇱 192.253.248.223

🇺🇸 172.253.244.154

🇧🇷 168.197.237.38

🇭🇰 165.154.41.6

🇫🇮 147.185.133.12

🇺🇸 147.185.132.217

🇫🇷 90.27.177.14

🇫🇷 85.217.140.16

🇱🇹 62.60.130.201

🇷🇴 80.94.92.234

🇳🇱 45.148.10.152

🇳🇱 45.148.10.12

🇬🇧 35.203.210.153

🇺🇸 34.26.148.248

🇳🇱 195.178.110.204

🇳🇱 195.178.110.39

🇬🇧 193.176.29.22