JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.78.55.59

Activity Trending Down

Abuse Confidence Score

29% Elevated

15 reports

12 reporters · latest 2 weeks ago

ISP: Linkear Srl
Usage Type: Fixed Line ISP
ASN: AS263801
Domain Name: linkear.com.ar
Country: 🇦🇷 Argentina
City: Buenos Aires, Buenos Aires F.D.

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 12 distinct reporters

First reported

January 31st 2024

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 3 🇷🇺 Russian Federation 2

Most common categories Port Scan 7 Brute-Force 6 Bad Web Bot 3 SSH 2 Web App Attack 2

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 AbuseIPDB informer	2026-10-13 10:14:59 (2 weeks ago)	nfdump top talker: 149.78.55.59 \| first seen 2026-10-13 13:14:59.584 \| duration 00:00:00.141 \| flows=2 \| packets=51150 \| bytes=37.4 M \| pps=361 \| bps=2.1 M \| bpp=732 \| proto=udp	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 08:15:47 (2 weeks ago)	nfdump top talker: 149.78.55.59 \| first seen 2026-10-13 08:15:47.072 \| duration 00:00:00.043 \| flows=1 \| packets=23529 \| bytes=16.7 M \| pps=547 \| bps=3.1 M \| bpp=709 \| proto=any	DDoS Attack Port Scan Exploited Host
🇺🇸 TPI-Abuse	2026-10-04 04:45:28 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 149.78.55.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:45:20.225050 2026] [security2:error] [pid 29540:tid 29540] [client 149.78.55.59:59054] Mod ... show more (mod_security) mod_security (id:210350) triggered by 149.78.55.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:45:20.225050 2026] [security2:error] [pid 29540:tid 29540] [client 149.78.55.59:59054] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|woodsoninsuranceagency.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "woodsoninsuranceagency.com"] [uri "/"] [unique_id "asHZ4Hsf5NDx6Jv-WLCZYAAAAAE"], referer: https://automatedbacklinkbuilder.store/dir/backlinks-for-traffic-233850 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-02 05:28:48 (4 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
Anonymous	2026-10-01 13:04:42 (4 weeks ago)	PORT & IP Scan.	Port Scan Brute-Force
🇧🇷 noconex	2026-10-01 02:45:32 (4 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.78.55.59	Port Scan Brute-Force SSH
Anonymous	2026-09-24 09:32:09 (1 month ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
Anonymous	2026-09-23 23:51:40 (1 month ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-20 13:06:02 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
Anonymous	2026-09-20 06:58:01 (1 month ago)	WEB attack	Brute-Force
🇺🇸 TPI-Abuse	2026-09-16 20:16:02 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 149.78.55.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:15:55.159569 2026] [security2:error] [pid 3026:tid 3105] [client 149.78.55.59:42236] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 149.78.55.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:15:55.159569 2026] [security2:error] [pid 3026:tid 3105] [client 149.78.55.59:42236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|oldpl8s.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oldpl8s.com"] [uri "/"] [unique_id "aqr4-1-efDWDxOveht5J1wAAAVA"], referer: https://backlinkcheckertool.online/dir/quality-backlink-services-153266 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-02 09:34:14 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 vtchost.com	2026-07-02 14:56:23 (3 months ago)	Jul 2 16:46:53 vtchost kernel: [ 3469.652489] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=149.78.55.59 DST=161.97.181.152 LEN=56 TOS=0x00 PREC=0x00 TTL=241 ID=52288 PROTO=UDP SPT=53 DPT=53 LEN=36 ...	Port Scan
🇩🇪 pltcldvlpr	2026-06-11 04:59:11 (4 months ago)	Bogus Useragent: 149.78.55.59 - - [11/Jun/2026:06:59:10 +0200] "GET /protocol?id=sn_4_129&paragraph=13392160&seq=555 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1) AppleWebKit/535.15.5 (KHTML, like Gecko) Version/4.0.2 Safari/535.15.5" ... show more Bogus Useragent: 149.78.55.59 - - [11/Jun/2026:06:59:10 +0200] "GET /protocol?id=sn_4_129&paragraph=13392160&seq=555 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1) AppleWebKit/535.15.5 (KHTML, like Gecko) Version/4.0.2 Safari/535.15.5" asn=263801 org="LINKEAR SRL" country=AR ... show less	Bad Web Bot
🇬🇷 gbetsis	2024-01-31 20:06:57 (2 years ago)	TCP Port Scanning	Port Scan Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 209.99.187.155

🇦🇺 202.177.219.254

🇺🇦 185.157.121.160

🇫🇮 65.108.103.50

🇸🇪 46.59.122.78

🇨🇳 221.229.106.252

🇪🇹 196.191.116.213

🇸🇦 188.54.103.158

🇦🇷 186.158.120.84

🇻🇳 171.237.176.209

🇩🇪 167.94.146.36

🇨🇳 139.199.80.137

🇺🇸 132.196.86.77

🇺🇸 129.121.101.28

🇩🇪 109.160.32.174

🇵🇰 103.196.163.109

🇳🇱 91.148.244.131

🇳🇱 91.92.40.12

🇳🇱 87.210.233.226

🇰🇷 59.11.202.38