AbuseIPDB » 138.94.52.26

Check an IP Address, Domain Name, or Subnet

e.g. 35.172.230.154, microsoft.com, or 5.188.10.0/24

138.94.52.26 was found in our database!

This IP was reported 1,055 times. Confidence of Abuse is 100%: ?

100%

ISP	Andrade & Landim Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
Domain Name	comtacmg.com
Country	Brazil
City	Pouso Alegre, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.94.52.26

Whois 138.94.52.26

IP Abuse Reports for 138.94.52.26:

This IP address has been reported a total of 1,055 times from 423 distinct sources. 138.94.52.26 was first reported on December 1st 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Parth Maniar	20 Jan 2023	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ... show moreSSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
saima.info	18 Jan 2023	Failed password for user root ssh2	Brute-Force Exploited Host SSH
saima.info	18 Jan 2023	Failed password for user root ssh2	Brute-Force Exploited Host SSH
novumedukacja.pl	14 Jan 2023	Dec 8 23:18:20 novum-srv2 sshd[15916]: Invalid user ts3 from 138.94.52.26 port 40170 Dec 8 2 ... show moreDec 8 23:18:20 novum-srv2 sshd[15916]: Invalid user ts3 from 138.94.52.26 port 40170 Dec 8 23:22:20 novum-srv2 sshd[16128]: Invalid user speedtest from 138.94.52.26 port 38046 Dec 8 23:26:21 novum-srv2 sshd[16290]: Invalid user prueba from 138.94.52.26 port 35926 ... show less	Brute-Force SSH
Anonymous	03 Jan 2023	Dec 8 23:13:40 cloud sshd[2140494]: Disconnected from authenticating user root 138.94.52.26 port 38 ... show moreDec 8 23:13:40 cloud sshd[2140494]: Disconnected from authenticating user root 138.94.52.26 port 38442 [preauth] Dec 8 23:18:48 cloud sshd[2140532]: Invalid user ts3 from 138.94.52.26 port 41738 Dec 8 23:18:48 cloud sshd[2140532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.94.52.26 Dec 8 23:18:50 cloud sshd[2140532]: Failed password for invalid user ts3 from 138.94.52.26 port 41738 ssh2 Dec 8 23:18:52 cloud sshd[2140532]: Disconnected from invalid user ts3 138.94.52.26 port 41738 [preauth] show less	Brute-Force SSH
Seohyun-DC	01 Jan 2023	Invalid user nadmin from 138.94.52.26 port 35994	Brute-Force SSH
Seohyun-DC	01 Jan 2023	Invalid user ganesh from 138.94.52.26 port 46580	Brute-Force SSH
ipcop.net	31 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force
ipcop.net	30 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force
ipcop.net	30 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force
ipcop.net	30 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force
ipcop.net	30 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force
ipcop.net	28 Dec 2022	Dec 19 06:54:40 gw-de20-01.guestgw.net sshd[74483]: Invalid user mcserver from 138.94.52.26 port 422 ... show moreDec 19 06:54:40 gw-de20-01.guestgw.net sshd[74483]: Invalid user mcserver from 138.94.52.26 port 42206 Dec 19 06:54:41 gw-de20-01.guestgw.net sshd[74483]: Disconnected from invalid user mcserver 138.94.52.26 port 42206 [preauth] Dec 19 06:57:54 gw-de20-01.guestgw.net sshd[74997]: Invalid user it from 138.94.52.26 port 51442 Dec 19 06:57:55 gw-de20-01.guestgw.net sshd[74997]: Disconnected from invalid user it 138.94.52.26 port 51442 [preauth] Dec 19 06:59:23 gw-de20-01.guestgw.net sshd[75418]: Invalid user oracle from 138.94.52.26 port 49402 show less	Brute-Force
ipcop.net	28 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force
ipcop.net	28 Dec 2022	Malicious activity detected from 138.94.52.26.	Brute-Force