JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.204.208.115

Neutral Activity

Abuse confidence score ?

0% Low Risk

63 reports

38 reporters · latest 6 months ago

ISP	GIGA MAIS FIBRA TELECOMUNICACOES S.A.
Usage Type	Fixed Line ISP
ASN	AS28294
Domain Name	gigamaisfibra.com.br
Country	🇧🇷 Brazil
City	Guarulhos, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

138.204.208.115 has been reported 63 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 138.204.208.115

This IP address has been reported a total of 63 times from 38 distinct sources. 138.204.208.115 was first reported on August 18th 2022, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 octageeks.com	2026-03-02 05:25:05 (6 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇨🇭 backslash	2025-09-25 07:05:16 (11 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇳🇱 exxos	2025-08-28 19:05:19 (1 year ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-08-27 15:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-08-02 11:10:01 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇪🇸 Global Cyber Police	2025-07-27 18:59:08 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇪🇸 Global Cyber Police	2025-07-27 18:59:08 (1 year ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack
🇺🇸 ersei.net	2025-06-11 17:12:02 (1 year ago)	DDoS	DDoS Attack
🇲🇾 syokadmin	2025-02-16 11:23:17 (1 year ago)	(cpanel) Failed cPanel login from 138.204.208.115 (BR/Brazil/-): 1 in the last 3600 secs	Brute-Force Web App Attack
Anonymous	2024-01-17 15:07:41 (2 years ago)	2024-01-17T08:53:50.212525-06:00 server sshd[1800338]: Failed password for invalid user maedeh from ... show more 2024-01-17T08:53:50.212525-06:00 server sshd[1800338]: Failed password for invalid user maedeh from 138.204.208.115 port 26295 ssh2 2024-01-17T09:05:16.166868-06:00 server sshd[1807228]: Invalid user navidet from 138.204.208.115 port 26920 2024-01-17T09:05:16.170648-06:00 server sshd[1807228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.208.115 2024-01-17T09:05:17.968450-06:00 server sshd[1807228]: Failed password for invalid user navidet from 138.204.208.115 port 26920 ssh2 2024-01-17T09:07:35.601358-06:00 server sshd[1808591]: Invalid user alivilla from 138.204.208.115 port 26708 ... show less	Brute-Force SSH
🇨🇦 Flashfire	2024-01-17 15:06:19 (2 years ago)	Jan 17 14:58:59 flashfire sshd[2743767]: Failed password for invalid user maedeh from 138.204.208.11 ... show more Jan 17 14:58:59 flashfire sshd[2743767]: Failed password for invalid user maedeh from 138.204.208.115 port 60697 ssh2 Jan 17 14:59:01 flashfire sshd[2743767]: Disconnected from invalid user maedeh 138.204.208.115 port 60697 [preauth] Jan 17 15:06:15 flashfire sshd[2745728]: Invalid user navidet from 138.204.208.115 port 63174 Jan 17 15:06:15 flashfire sshd[2745728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.208.115 Jan 17 15:06:18 flashfire sshd[2745728]: Failed password for invalid user navidet from 138.204.208.115 port 63174 ssh2 ... show less	Brute-Force SSH
🇳🇱 wlt-blocker	2024-01-17 13:31:15 (2 years ago)	Attempts to access SSH server with wrong credentials	SSH
🇬🇧 oolivero45	2024-01-17 13:25:48 (2 years ago)	Jan 17 13:15:36 nervous-edison8 sshd[243696]: Failed password for invalid user alexandra from 138.20 ... show more Jan 17 13:15:36 nervous-edison8 sshd[243696]: Failed password for invalid user alexandra from 138.204.208.115 port 26706 ssh2 Jan 17 13:23:30 nervous-edison8 sshd[246749]: Invalid user dbuser from 138.204.208.115 port 61680 Jan 17 13:23:30 nervous-edison8 sshd[246749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.208.115 Jan 17 13:23:32 nervous-edison8 sshd[246749]: Failed password for invalid user dbuser from 138.204.208.115 port 61680 ssh2 Jan 17 13:25:47 nervous-edison8 sshd[247619]: Invalid user cisco from 138.204.208.115 port 26503 ... show less	Brute-Force SSH
🇩🇪 Finn	2024-01-17 13:24:43 (2 years ago)	Automatic report: Failed SSH login [2]	Brute-Force SSH
🇩🇪 24-seven.io	2024-01-17 10:44:56 (2 years ago)	Jan 17 11:35:16 cow sshd[1562846]: Failed password for invalid user wangjh from 138.204.208.115 port ... show more Jan 17 11:35:16 cow sshd[1562846]: Failed password for invalid user wangjh from 138.204.208.115 port 63909 ssh2 Jan 17 11:42:32 cow sshd[1567841]: Invalid user fenglanwang from 138.204.208.115 port 26275 Jan 17 11:42:32 cow sshd[1567841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.208.115 Jan 17 11:42:34 cow sshd[1567841]: Failed password for invalid user fenglanwang from 138.204.208.115 port 26275 ssh2 Jan 17 11:44:56 cow sshd[1569492]: Invalid user xiufangwang from 138.204.208.115 port 65387 ... show less	Brute-Force SSH

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 195.182.16.23

🇭🇰 165.154.6.75

🇺🇸 162.216.149.84

🇺🇸 147.185.132.35

🇵🇭 119.95.186.118

🇨🇳 112.46.214.246

🇨🇳 111.56.156.96

🇮🇩 103.193.176.131

🇭🇰 103.192.39.53

🇭🇰 103.192.39.43

🇧🇩 103.121.176.60

🇮🇷 95.38.176.233

🇷🇺 95.24.24.105

🇹🇷 94.154.43.36

🇫🇷 91.231.89.212

🇱🇹 62.60.130.103

🇬🇧 35.203.210.250

🇺🇸 3.82.209.93

🇩🇪 213.209.159.231

🇹🇷 188.59.178.11