JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.0.196.49

138.0.196.49 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 54%: ?

54%

ISP	DTEL TELECOM
Usage Type	Fixed Line ISP
ASN	AS263073
Hostname(s)	ip-138.0.196.49.dtel.com.br
Domain Name	dtel.com.br
Country	🇧🇷 Brazil
City	Maragogi, Alagoas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.0.196.49

Whois 138.0.196.49

IP Abuse Reports for 138.0.196.49:

This IP address has been reported a total of 27 times from 16 distinct sources. 138.0.196.49 was first reported on April 21st 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-07-09 05:31:10 (13 minutes ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-07-08 23:03:11 (6 hours ago)	NOQUEUE - IP: 138.0.196.49 - Jul 9 01:03:11 plesk postfix/smtpd[2346650]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 138.0.196.49 - Jul 9 01:03:11 plesk postfix/smtpd[2346650]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 5.7.1 Service unavailable; Client host [138.0.196.49] blocked using dnsbl-1.uceprotect.net; IP 138.0.196.49 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.0.196.49; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<138.0.196.49> show less	Email Spam
🇩🇪 filstal.org	2026-07-07 01:56:06 (2 days ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 Viveronese	2026-07-06 11:10:17 (2 days ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-07-05 17:15:06 (3 days ago)	NOQUEUE - IP: 138.0.196.49 - Jul 5 19:15:03 plesk postfix/smtpd[3267564]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 138.0.196.49 - Jul 5 19:15:03 plesk postfix/smtpd[3267564]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 5.7.1 Service unavailable; Client host [138.0.196.49] blocked using dnsbl-1.uceprotect.net; IP 138.0.196.49 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.0.196.49; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<ip-138.0.196.49.dtel.com.br> show less	Email Spam
🇬🇧 Bytemark	2026-06-29 14:09:17 (1 week ago)	Jun 29 15:09:17 dlcentre3 postfix/smtpd[8222]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 ... show more Jun 29 15:09:17 dlcentre3 postfix/smtpd[8222]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 5.7.1 Service unavailable; Client host [138.0.196.49] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/138.0.196.49; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ip-138.0.196.49.dtel.com.br> show less	Email Spam Spoofing Brute-Force Exploited Host
🇬🇧 PeravixGroup	2026-06-25 03:17:31 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇳🇱 COMPLEX	2026-06-25 00:02:34 (2 weeks ago)	Unsolicited TCP traffic \| Action: DROP \| Port 80	Port Scan
🇫🇮 23p02732	2026-06-22 21:26:37 (2 weeks ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇫🇷 Touzeau	2026-06-21 11:15:23 (2 weeks ago)		Email Spam
🇨🇭 Origon	2026-06-16 14:33:02 (3 weeks ago)	NOQUEUE - IP: 138.0.196.49 - Jun 16 16:33:02 plesk postfix/smtpd[4052874]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 138.0.196.49 - Jun 16 16:33:02 plesk postfix/smtpd[4052874]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 5.7.1 Service unavailable; Client host [138.0.196.49] blocked using dnsbl-1.uceprotect.net; IP 138.0.196.49 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.0.196.49; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<ip-138.0.196.49.dtel.com.br> show less	Email Spam
🇬🇧 Bytemark	2026-06-13 19:33:49 (3 weeks ago)	Jun 13 20:33:49 dlcentre3 postfix/smtpd[13551]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 55 ... show more Jun 13 20:33:49 dlcentre3 postfix/smtpd[13551]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 5.7.1 Service unavailable; Client host [138.0.196.49] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/138.0.196.49; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ip-138.0.196.49.dtel.com.br> show less	Email Spam Spoofing Brute-Force Exploited Host
🇨🇭 Origon	2026-06-11 05:32:41 (4 weeks ago)	NOQUEUE - IP: 138.0.196.49 - Jun 11 07:32:41 plesk postfix/smtpd[2946434]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 138.0.196.49 - Jun 11 07:32:41 plesk postfix/smtpd[2946434]: NOQUEUE: reject: RCPT from unknown[138.0.196.49]: 554 5.7.1 Service unavailable; Client host [138.0.196.49] blocked using dnsbl-1.uceprotect.net; IP 138.0.196.49 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.0.196.49; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[138.0.196.49]> show less	Email Spam
🇺🇸 DiodeDave	2026-06-10 22:30:54 (4 weeks ago)	Attempted access after blacklisting	Email Spam
🇩🇪 mattk	2026-06-08 05:37:57 (1 month ago)	Jun 8 05:37:56 postfix/smtpd[862863]: disconnect from unknown[138.0.196.49] ehlo=1 mail=1 rcpt=0/1 c ... show more Jun 8 05:37:56 postfix/smtpd[862863]: disconnect from unknown[138.0.196.49] ehlo=1 mail=1 rcpt=0/1 commands=2/3 show less	Email Spam Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.107.118.105

🇳🇱 91.92.40.13

🇩🇪 69.5.169.98

🇩🇪 69.5.169.60

🇩🇪 69.5.169.56

🇮🇩 163.7.15.98

🇺🇸 162.216.150.17

🇺🇸 147.185.132.169

🇨🇳 139.210.168.240

🇧🇪 104.155.23.46

🇹🇷 94.154.43.41

🇲🇦 81.192.46.45

🇩🇪 69.5.169.142

🇳🇱 45.148.10.183

🇺🇸 20.161.68.244

🇨🇳 8.138.92.126

🇧🇷 201.55.184.173

🇫🇮 147.185.133.250

🇺🇸 103.168.66.158

🇷🇺 77.221.151.241