JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.117.183.210

138.117.183.210 was found in our database!

This IP was reported 121 times. Confidence of Abuse is 44%: ?

44%

ISP	Digital Telecomunicações Ltda-Me
Usage Type	Fixed Line ISP
ASN	AS264239
Domain Name	Unknown
Country	🇧🇷 Brazil
City	Serrinha, Bahia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.117.183.210

Whois 138.117.183.210

IP Abuse Reports for 138.117.183.210:

This IP address has been reported a total of 121 times from 65 distinct sources. 138.117.183.210 was first reported on November 8th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-07-15 21:06:43 (1 week ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 kosada.com	2026-07-10 02:51:07 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-08 19:42:49 (2 weeks ago)	SpamAssassin score 15.9 exceeded block threshold 15.0	Email Spam
🇩🇪 filstal.org	2026-07-07 23:46:03 (2 weeks ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇨🇭 Origon	2026-07-06 21:58:49 (2 weeks ago)	NOQUEUE - IP: 138.117.183.210 - Jul 6 23:58:49 plesk postfix/smtpd[1467062]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 138.117.183.210 - Jul 6 23:58:49 plesk postfix/smtpd[1467062]: NOQUEUE: reject: RCPT from unknown[138.117.183.210]: 554 5.7.1 Service unavailable; Client host [138.117.183.210] blocked using dnsbl-1.uceprotect.net; IP 138.117.183.210 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.117.183.210; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<138.117.183.210> show less	Email Spam
🇮🇩 hermawan	2026-07-01 11:52:23 (3 weeks ago)	[Wed Jul 01 18:52:19.085470 2026] [security2:error] [pid 327112:tid 139637556221632] [client 138.117 ... show more [Wed Jul 01 18:52:19.085470 2026] [security2:error] [pid 327112:tid 139637556221632] [client 138.117.183.210:38432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin"] [unique_id "akT_c2ObfVqSHajej7xd8wAAAwU"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[327145] [rFG2UosvJwg] [akT_c2ObfVqSHajej7xd8wAAAwU] keep_alive=[1] [2026-07-01 18:52:19.085477] [R:akT_c2ObfVqSHajej7xd8 ... show less	Email Spam Hacking
🇺🇸 Vasili Sviridov	2026-06-29 00:00:40 (3 weeks ago)	<redacted>: Helo command rejected: need fully-qualified hostname; from=<redacted> to=<redacted> prot ... show more <redacted>: Helo command rejected: need fully-qualified hostname; from=<redacted> to=<redacted> proto=ESMTP helo=<redacted> show less	Email Spam
🇺🇸 kosada.com	2026-06-25 20:18:59 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇷🇸 Smel	2026-06-14 05:49:30 (1 month ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇷🇺 DZBOT	2026-06-10 15:30:25 (1 month ago)	DZBOT: Brute-force users IMAP/POP3	Brute-Force
🇨🇭 Origon	2026-06-08 14:06:08 (1 month ago)	NOQUEUE - IP: 138.117.183.210 - Jun 8 16:06:08 plesk postfix/smtpd[2383244]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 138.117.183.210 - Jun 8 16:06:08 plesk postfix/smtpd[2383244]: NOQUEUE: reject: RCPT from unknown[138.117.183.210]: 554 5.7.1 Service unavailable; Client host [138.117.183.210] blocked using dnsbl-1.uceprotect.net; IP 138.117.183.210 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.117.183.210; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<138.117.183.210> show less	Email Spam
🇩🇪 filstal.org	2026-05-31 07:31:05 (1 month ago)	CrowdSec: crowdsecurity/postfix-helo-rejected	Email Spam
🇩🇪 NewGastroline	2026-05-30 22:06:01 (1 month ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-30 10:32:07 (1 month ago)	NOQUEUE - IP: 138.117.183.210 - May 30 12:32:07 plesk postfix/smtpd[2555441]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 138.117.183.210 - May 30 12:32:07 plesk postfix/smtpd[2555441]: NOQUEUE: reject: RCPT from unknown[138.117.183.210]: 554 5.7.1 Service unavailable; Client host [138.117.183.210] blocked using dnsbl-1.uceprotect.net; IP 138.117.183.210 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=138.117.183.210; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<138.117.183.210> show less	Email Spam
🇩🇪 Viveronese	2026-05-28 15:00:09 (1 month ago)	SASL LOGIN authentication failed	Brute-Force

Showing 1 to 15 of 121 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.66

🇳🇱 176.65.149.212

🇬🇦 154.116.9.14

🇺🇸 147.185.132.233

🇫🇷 91.196.152.214

🇸🇬 43.249.38.40

🇧🇪 34.62.64.159

🇺🇸 24.237.6.67

🇺🇸 20.118.208.65

🇳🇱 20.56.146.118

🇺🇸 2605:aa80:0:9::3

🇩🇪 194.187.176.230

🇮🇩 182.9.35.74

🇧🇷 151.244.40.81

🇺🇸 147.185.132.142

🇺🇸 109.105.210.13

🇧🇩 103.138.31.138

🇸🇮 102.220.160.47

🇺🇸 73.74.23.133

🇺🇸 64.62.156.214