JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.122.164.25

138.122.164.25 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 0%: ?

ISP	OS CONNECT INFORMATICA EIRELI - EPP
Usage Type	Fixed Line ISP
ASN	AS52800
Hostname(s)	138-122-164-25.dynamic.osconnect.com.br
Domain Name	osconnect.com.br
Country	🇧🇷 Brazil
City	Itirapina, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.122.164.25

Whois 138.122.164.25

IP Abuse Reports for 138.122.164.25:

This IP address has been reported a total of 78 times from 37 distinct sources. 138.122.164.25 was first reported on May 23rd 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-01-20 14:49:05 (5 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇳🇱 Cloud86 B.V.	2026-01-16 11:00:04 (5 months ago)	Email spam	Email Spam
🇨🇳 ThreatBook.io	2025-12-26 00:06:11 (5 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/138.122.164.25	SSH
🇳🇱 GabrielJST	2025-10-24 21:15:18 (7 months ago)	(wordpress) Failed wordpress login from 138.122.164.25 (BR/Brazil/138-122-164-25.dynamic.osconnect.c ... show more (wordpress) Failed wordpress login from 138.122.164.25 (BR/Brazil/138-122-164-25.dynamic.osconnect.com.br) show less	Brute-Force
🇮🇹 VHosting	2025-10-06 01:39:40 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 nowyouknow	2025-09-16 06:05:10 (9 months ago)	(From [email protected])	Phishing Web Spam
🇳🇱 antikirra	2025-09-15 12:07:43 (9 months ago)	Proxy Port Scanning	Port Scan
🇺🇸 nowyouknow	2025-09-14 21:14:13 (9 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 RLDD	2025-09-14 17:39:25 (9 months ago)	WP probing -sol	Web App Attack
🇬🇧 relianoid.com	2025-09-02 13:05:02 (9 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2025-08-29 00:10:59 (9 months ago)	SOHODE WEBFORM SPAM 138.122.164.25 (138-122-164-25.dynamic.osconnect.com.br)	Web Spam
🇳🇱 hostmaster.stream	2025-08-23 10:28:36 (10 months ago)	Honeypot triggered on newsletter form. Web spam detected via newsletter signup form. Honeypot field ... show more Honeypot triggered on newsletter form. Web spam detected via newsletter signup form. Honeypot field was filled. show less	Web Spam
🇺🇸 TPI-Abuse	2025-07-29 14:16:14 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 138.122.164.25 (138-122-164-25.dynamic.osconnec ... show more (mod_security) mod_security (id:225170) triggered by 138.122.164.25 (138-122-164-25.dynamic.osconnect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 10:16:10.153602 2025] [security2:error] [pid 30738:tid 30738] [client 138.122.164.25:52454] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|texaslawman.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "texaslawman.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIjXqrbq7eD0skzpd4HrHgAAAA0"], referer: https://texaslawman.net/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-29 09:26:11 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 138.122.164.25 (138-122-164-25.dynamic.osconnec ... show more (mod_security) mod_security (id:225170) triggered by 138.122.164.25 (138-122-164-25.dynamic.osconnect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 05:26:03.943537 2025] [security2:error] [pid 17886:tid 17886] [client 138.122.164.25:47250] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIiTq0ySbwFV1XMcD3QRjAAAAA0"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Nicolmn	2025-07-21 03:45:07 (11 months ago)	Web form spam ( id lmprsk.l )	Web Spam

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.241

🇲🇽 187.192.86.153

🇰🇷 169.211.232.182

🇨🇳 117.155.126.224

🇨🇳 106.75.154.218

🇨🇦 85.217.149.54

🇨🇳 218.202.143.68

🇧🇷 205.210.31.155

🇬🇧 195.140.214.29

🇳🇱 192.109.200.220

🇳🇱 176.65.139.128

🇨🇦 165.140.229.134

🇫🇮 147.185.133.199

🇺🇸 147.185.132.197

🇩🇪 139.19.117.197

🇫🇷 64.204.13.196

🇺🇸 34.11.57.127

🇳🇱 31.14.32.6

🇺🇸 20.163.15.119

🇻🇳 14.249.115.134