JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.255.30.25

138.255.30.25 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 61%: ?

61%

ISP	CONNECT TELECOM
Usage Type	Fixed Line ISP
ASN	AS263952
Hostname(s)	30.255.138-25.iconnecttelecom.com.br
Domain Name	iconnecttelecom.com.br
Country	🇧🇷 Brazil
City	Sao Joao dos Patos, Maranhao

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.255.30.25

Whois 138.255.30.25

IP Abuse Reports for 138.255.30.25:

This IP address has been reported a total of 13 times from 11 distinct sources. 138.255.30.25 was first reported on June 19th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MusicLibrary	2026-07-07 10:23:26 (19 hours ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2026-07-06 17:59:00 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 138.255.30.25 (BR/Brazil/30.255.138-25.iconnecttelecom.com.br ... show more (smtpauth) Failed SMTP AUTH login from 138.255.30.25 (BR/Brazil/30.255.138-25.iconnecttelecom.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-06 13:55:38 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.25]:13936: 535 Incorrect authentication data ([email protected]) 2026-07-06 13:55:41 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.25]:14991: 535 Incorrect authentication data ([email protected]) 2026-07-06 13:55:44 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.25]:15399: 535 Incorrect authentication data (set_id=shweta) 2026-07-06 13:55:44 SMTP call from [138.255.30.25]:10985 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL) 2026-07-06 13:58:57 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.25]:33817: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇧🇪 voormedia	2026-07-04 14:23:08 (3 days ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇮🇩 xveil	2026-07-03 13:19:47 (4 days ago)	2026-07-03T20:19:44.108686 mail-honeypot postfix/submission/smtpd[11237]: warning: unknown[138.255.3 ... show more 2026-07-03T20:19:44.108686 mail-honeypot postfix/submission/smtpd[11237]: warning: unknown[138.255.30.25]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 ANTI SCANNER	2026-06-30 18:03:26 (1 week ago)	Scanner : /phpmyadmin/	Web Spam
🇧🇷 KingHost	2026-06-30 14:21:06 (1 week ago)		Brute-Force
🇬🇧 Bytemark	2026-06-30 10:31:39 (1 week ago)	Jun 30 11:31:39 lnx1 postfix/smtps/smtpd[1812845]: warning: unknown[138.255.30.25]: SASL PLAIN authe ... show more Jun 30 11:31:39 lnx1 postfix/smtps/smtpd[1812845]: warning: unknown[138.255.30.25]: SASL PLAIN authentication failed: (reason unavailable), [email protected] show less	Email Spam Spoofing Exploited Host
🇧🇷 hostmach	2026-06-29 17:40:04 (1 week ago)	(sshd) Failed SSH login from 138.255.30.25 (BR/Brazil/30.255.138-25.iconnecttelecom.com.br): 5 in th ... show more (sshd) Failed SSH login from 138.255.30.25 (BR/Brazil/30.255.138-25.iconnecttelecom.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 29 14:39:56 diana sshd-session[140061]: Invalid user [email protected] from 138.255.30.25 port 45778 Jun 29 14:39:58 diana sshd-session[140086]: Invalid user arts from 138.255.30.25 port 46101 Jun 29 14:39:59 diana sshd-session[140099]: Invalid user distribuidorafox from 138.255.30.25 port 46373 Jun 29 14:39:59 diana sshd-session[140105]: Invalid user [email protected] from 138.255.30.25 port 57681 Jun 29 14:40:00 diana sshd-session[140126]: Invalid user arts from 138.255.30.25 port 46621 show less	Brute-Force SSH
Anonymous	2026-06-29 15:00:40 (1 week ago)		Brute-Force
🇩🇪 nyt	2026-06-25 11:51:07 (1 week ago)	DB Admin Probe, Accessing admin panel without authentication	Web App Attack
🇮🇩 xveil	2026-06-22 16:34:14 (2 weeks ago)	2026-06-22T23:34:09.898676 mail-honeypot postfix/submission/smtpd[16878]: warning: unknown[138.255.3 ... show more 2026-06-22T23:34:09.898676 mail-honeypot postfix/submission/smtpd[16878]: warning: unknown[138.255.30.25]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇧🇪 voormedia	2026-06-22 10:43:32 (2 weeks ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇩🇪 london2038.com	2026-06-19 16:59:44 (2 weeks ago)	Connection atttempts against closed TCP ports Jun 19 18:59:36 BLOCK SRC=138.255.30.25 LEN=52 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 19 18:59:36 BLOCK SRC=138.255.30.25 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=7686 DF PROTO=TCP SPT=14468 DPT=22 WINDOW=8192 RES=0x00 SYN Jun 19 18:59:36 BLOCK SRC=138.255.30.25 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=7687 DF PROTO=TCP SPT=8805 DPT=21 WINDOW=8192 RES=0x00 SYN Jun 19 18:59:39 BLOCK SRC=138.255.30.25 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=8260 DF PROTO=TCP SPT=8805 DPT=21 WINDOW=8192 RES=0x00 SYN show less	Port Scan

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇺🇸 165.154.162.163

🇺🇸 91.230.168.123

🇷🇺 193.187.92.15

🇲🇽 189.215.123.122

🇩🇪 167.94.146.34

🇫🇮 147.185.133.236

🇲🇼 137.115.2.161

🇺🇸 104.28.195.186

🇫🇷 91.196.152.91

🇫🇷 85.217.140.13

🇺🇸 52.207.196.234

🇺🇸 52.176.211.73

🇬🇧 35.203.211.153

🇶🇦 2600:1900:4260:40e::e2

🇺🇸 207.90.244.18

🇲🇴 182.93.7.194

🇻🇳 121.200.216.55

🇮🇳 110.172.147.190

🇨🇳 14.103.115.210