JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.255.206.225

138.255.206.225

Activity Trending Down

154 reports found in our database

63% ▼ ▼ ▼ Elevated

Abuse confidence score ?

ISP

CIT INFORMATICA

Usage Type

Fixed Line ISP

ASN

AS263983

Domain Name

targetdigital.net.br

Country

🇧🇷 Brazil

City

Mirim Doce, Santa Catarina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 138.255.206.225:

This IP address has been reported a total of 154 times from 68 distinct sources. 138.255.206.225 was first reported on April 29th 2022, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Germany with 8 reports; Indonesia with 5 reports; France with 4 reports. The most common categories in these recent reports were: Brute-Force 31 times; Hacking 8 times; Email Spam 6 times; Web App Attack 5 times; Port Scan 3 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Stadt Schleiden	2026-08-25 18:57:55 (1 week ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
🇫🇷 solution.it	2026-08-25 18:33:04 (1 week ago)	Aug 25 20:33:03 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 13 secs): us ... show more Aug 25 20:33:03 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 13 secs): user=<paolo.giardini>, method=PLAIN, rip=138.255.206.225, lip=51.77.194.251, TLS, session=<lxeHVONZIryK/87h> show less	Brute-Force
🇺🇸 entangled_mongoose	2026-08-25 07:50:36 (1 week ago)	Failed SMTP authentication with username 'user_sha_37863@domain_sha_70fc2'.	Brute-Force Email Spam
🇬🇧 D3monite	2026-08-25 02:46:56 (2 weeks ago)	Attempted Brute Force (dovecot)	Brute-Force
🇩🇪 ksol-hostmaster	2026-08-24 19:35:12 (2 weeks ago)	Aug 24 21:35:12 ksol dovecot[75015]: auth-worker(98954): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 24 21:35:12 ksol dovecot[75015]: auth-worker(98954): conn unix:auth-worker (uid=143): auth-worker<7>: sql(anonymized@email,138.255.206.225,<UECnFdBZFaSK/87h>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇮🇩 sockominfo	2026-08-24 06:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 138.255.206.225. Threat Score: 6.5/10 (HIGH). Confidence: ... show more Zimbra: Login failures from malicious IP: 138.255.206.225. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-08-23 06:36:26 (2 weeks ago)	IMAP password guessing	Brute-Force
🇷🇴 clauss	2026-08-23 04:31:10 (2 weeks ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇮🇹 www.tana.it	2026-08-20 17:44:22 (2 weeks ago)	dictionary attack	Brute-Force
🇿🇦 hostsec_za	2026-08-18 04:00:02 (3 weeks ago)	IMAP/POP3 Auth Attack. 25 failed logins in 24 hours.	Brute-Force
🇮🇹 www.tana.it	2026-08-18 03:35:02 (3 weeks ago)	dictionary attack	Brute-Force
🇫🇷 iroco.co	2026-08-17 00:11:10 (3 weeks ago)	Aug 17 02:11:09 iroco cyrus/imap[1256915]: badlogin: [138.255.206.225] plaintext (winner_info6@iroco ... show more Aug 17 02:11:09 iroco cyrus/imap[1256915]: badlogin: [138.255.206.225] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Email Spam
Anonymous	2026-08-16 07:09:48 (3 weeks ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-08-15 13:00:53 (3 weeks ago)	Zimbra: Login failures from malicious IP: 138.255.206.225. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 138.255.206.225. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-15 12:00:53 (3 weeks ago)	Zimbra: Login failures from malicious IP: 138.255.206.225. Threat Score: 6.4/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 138.255.206.225. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.76.54.209

🇧🇪 198.235.24.203

🇺🇸 184.105.247.252

🇦🇷 181.87.77.92

🇺🇸 162.216.150.245

🇫🇮 147.185.133.105

🇸🇬 136.85.32.226

🇮🇳 103.172.11.149

🇸🇬 101.47.20.233

🇩🇪 69.5.169.10

🇺🇸 2604:a880:400:d1:0:4:efb3:7001

🇷🇺 212.32.212.19

🇧🇷 168.232.62.121

🇺🇸 162.248.100.97

🇺🇸 146.12.39.13

🇺🇸 47.251.13.198

🇺🇸 45.33.12.122

🇮🇷 37.255.247.194

🇺🇸 34.94.35.156

🇧🇪 34.76.52.201