AbuseIPDB » 138.204.234.27

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.180.255, microsoft.com, or 5.188.10.0/24

138.204.234.27 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 31%: ?

31%

ISP	Nossarede Telecom Ltda ME
Usage Type	Fixed Line ISP
Domain Name	nossaredetelecom.com.br
Country	Brazil
City	Recife, Pernambuco

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.204.234.27

Whois 138.204.234.27

IP Abuse Reports for 138.204.234.27:

This IP address has been reported a total of 35 times from 26 distinct sources. 138.204.234.27 was first reported on July 20th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Blue Pumpkin	10 May 2022	[Tue May 10 04:21:00.502361 2022] [:error] [pid 2768495] [client 138.204.234.27:0] [client 138.204.2 ... show more[Tue May 10 04:21:00.502361 2022] [:error] [pid 2768495] [client 138.204.234.27:0] [client 138.204.234.27] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluati ... show less	Brute-Force
ISPLtd	08 May 2022	May 8 11:55:24 SRC=138.204.234.27 PROTO=TCP SPT=53883 DPT=7667 SYN May 8 11:55:25 SRC=138.20 ... show moreMay 8 11:55:24 SRC=138.204.234.27 PROTO=TCP SPT=53883 DPT=7667 SYN May 8 11:55:25 SRC=138.204.234.27 PROTO=TCP SPT=53883 DPT=7667 SYN May 8 11:55:26 SRC=138.204.234.27 PROTO=TCP SPT=53923 DPT=7667 ... show less	Port Scan
SCHAPPY	22 Apr 2022	IP was involved in L7 DDoS attack.	DDoS Attack
Deveroonie	13 Apr 2022	Unauthorized connection attempt detected from IP address 138.204.234.27 to port 445 [V]	Port Scan Hacking
VentryShield	06 Mar 2022	DDoS attack on 0.0.0.0:25565.	DDoS Attack Open Proxy
Anonymous	20 Feb 2022	Performed DDoS Attack Against a web platform	DDoS Attack
unifr	19 Feb 2022	Unauthorized IMAP connection attempt	Brute-Force
nfsec.pl	16 Feb 2022	Used in attacks from Meris Botnet.	Open Proxy Exploited Host Web App Attack
Xewdy	26 Jan 2022	Used in participation of a (D)DoS attack.	DDoS Attack Exploited Host
VSM Networks	22 Jan 2022	Credential Stuffing	Brute-Force
my-host.name	19 Jan 2022	SSH Login Attempt with username "root" FAILED - DO3	Brute-Force Exploited Host
Xewdy	17 Jan 2022	Used in participation of a (D)DoS attack.	DDoS Attack Exploited Host
Xewdy	16 Jan 2022	Used in participation of a (D)DoS attack.	DDoS Attack Exploited Host
thardie	28 Dec 2021	2021-12-28T12:43:33.455704-08:00 orcas dovecot: imap-login: Disconnected \(auth failed, 1 attempts i ... show more2021-12-28T12:43:33.455704-08:00 orcas dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=138.204.234.27, lip=50.225.225.206, TLS, session=\<WbbG3zrUEtiKzOob\> 2021-12-28T12:43:49.467317-08:00 orcas dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<[email protected]\>, method=PLAIN, rip=138.204.234.27, lip=50.225.225.206, session=\<qZGF4DrUvOyKzOob\> 2021-12-28T12:44:34.721461-08:00 orcas dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=138.204.234.27, lip=50.225.225.206, session=\<pTh14zrUFYOKzOob\> 2021-12-28T12:45:09.512090-08:00 orcas dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 2 secs\): user=\<[email protected]\>, method=PLAIN, rip=138.204.234.27, lip=50.225.225.206, TLS, session=\<jBCI5TrUxeCKzOob\> 2021-12-28T12:47:32.454721-08:00 orcas dovecot: imap-login: Disconnected \(auth failed, 1 ... show less	Spoofing Brute-Force
EISadmin	23 Dec 2021	/etc/passwd and scriptinjection etc.	Hacking Web App Attack