AbuseIPDB » 138.255.30.40
138.255.30.40
This IP was reported 5 times. Confidence of
Abuse
is 4% : ?
ISP
CONNECT TELECOM
Usage Type
Fixed Line ISP
ASN
AS263952
Hostname(s)
30.255.138-40.iconnecttelecom.com.br
Domain Name
iconnecttelecom.com.br
Country
🇧🇷
Brazil
City
Sao Joao dos Patos, Maranhao
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 138.255.30.40 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
138.255.30.40 was first reported on
April 24th 2026 , and the most recent report was
4 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇷
ICS Labs
2026-08-01 19:09:00
(4 hours ago)
ICS Labs identified 138.255.30.40 as a malicious indicator from threat intelligence.
DDoS Attack
Hacking
Exploited Host
🇧🇷
ICS Labs
2026-05-21 15:04:57
(2 months ago)
ICS Labs identified 138.255.30.40 as a malicious indicator from threat intelligence.
DDoS Attack
Hacking
Exploited Host
🇺🇸
bigscoots.com
2026-04-24 18:49:34
(3 months ago)
(smtpauth) Failed SMTP AUTH login from 138.255.30.40 (BR/Brazil/30.255.138-40.iconnecttelecom.com.br ...
show more
(smtpauth) Failed SMTP AUTH login from 138.255.30.40 (BR/Brazil/30.255.138-40.iconnecttelecom.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-24 14:46:15 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:55978: 535 Incorrect authentication data ([email protected] )
2026-04-24 14:46:17 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:56513: 535 Incorrect authentication data ([email protected] )
2026-04-24 14:46:20 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:55365: 535 Incorrect authentication data (set_id=chblr41085)
2026-04-24 14:46:20 SMTP call from [138.255.30.40]:38759 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL)
2026-04-24 14:49:33 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:5356: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
🇮🇩
xveil
2026-04-24 15:06:20
(3 months ago)
2026-04-24T22:06:17.407911 mail-honeypot postfix/submission/smtpd[13709]: warning: unknown[138.255.3 ...
show more
2026-04-24T22:06:17.407911 mail-honeypot postfix/submission/smtpd[13709]: warning: unknown[138.255.30.40]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
🇺🇸
bigscoots.com
2026-04-24 11:05:34
(3 months ago)
(smtpauth) Failed SMTP AUTH login from 138.255.30.40 (BR/Brazil/30.255.138-40.iconnecttelecom.com.br ...
show more
(smtpauth) Failed SMTP AUTH login from 138.255.30.40 (BR/Brazil/30.255.138-40.iconnecttelecom.com.br): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-04-24 07:05:15 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:35220: 535 Incorrect authentication data ([email protected] )
2026-04-24 07:05:22 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:39768: 535 Incorrect authentication data (set_id=khaya)
2026-04-24 07:05:24 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:28344: 535 Incorrect authentication data ([email protected] )
2026-04-24 07:05:32 SMTP call from [138.255.30.40]:31352 dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?\t?", NULL)
2026-04-24 07:05:33 dovecot_plain authenticator failed for H=(CAIXA-02) [138.255.30.40]:56645: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: