JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.249.230.136

152.249.230.136 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS27699
Hostname(s)	152-249-230-136.user.vivozap.com.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Bauru, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.249.230.136

Whois 152.249.230.136

IP Abuse Reports for 152.249.230.136:

This IP address has been reported a total of 24 times from 24 distinct sources. 152.249.230.136 was first reported on July 26th 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2025-09-21 05:38:59 (9 months ago)		Bad Web Bot
🇦🇹 urnilxfgbez	2024-07-27 22:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇳 ThreatBook.io	2024-07-27 22:41:31 (1 year ago)	2024-07-27 08:13:13 ["/ip cloud print","ifconfig","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef ... show more 2024-07-27 08:13:13 ["/ip cloud print","ifconfig","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/","echo Hi \| cat -n"] 2024-07-27 11:22:02 ["uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la /dev/ttyGSM /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/","echo Hi \| cat -n"] 2024-07-27 12:03:19 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la /dev/ttyGSM /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","echo Hi \| cat -n"] show less	SSH
🇩🇪 maxxsense	2024-07-27 04:47:50 (1 year ago)	(sshd) Failed SSH login from 152.249.230.136 (BR/Brazil/152-249-230-136.user.vivozap.com.br)	Brute-Force SSH
🇩🇪 TimeWalker	2024-07-27 04:45:38 (1 year ago)	2024-07-27T05:45:17.603544+01:00 vmi985635.contaboserver.net sshd[4030061]: Failed password for root ... show more 2024-07-27T05:45:17.603544+01:00 vmi985635.contaboserver.net sshd[4030061]: Failed password for root from 152.249.230.136 port 39718 ssh2 2024-07-27T05:45:21.297614+01:00 vmi985635.contaboserver.net sshd[4030061]: Failed password for root from 152.249.230.136 port 39718 ssh2 2024-07-27T05:45:26.702769+01:00 vmi985635.contaboserver.net sshd[4030061]: Failed password for root from 152.249.230.136 port 39718 ssh2 2024-07-27T05:45:33.125652+01:00 vmi985635.contaboserver.net sshd[4030061]: Failed password for root from 152.249.230.136 port 39718 ssh2 2024-07-27T05:45:38.065572+01:00 vmi985635.contaboserver.net sshd[4030061]: Failed password for root from 152.249.230.136 port 39718 ssh2 ... show less	Brute-Force SSH
🇩🇪 ps-center	2024-07-27 04:42:12 (1 year ago)	C2-W: TCP-Scanner. Port: 22	Port Scan
🇫🇷 oh.mg	2024-07-27 04:39:35 (1 year ago)	(sshd) Failed SSH login from 152.249.230.136 (BR/Brazil/152-249-230-136.user.vivozap.com.br): 1 in t ... show more (sshd) Failed SSH login from 152.249.230.136 (BR/Brazil/152-249-230-136.user.vivozap.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 27 04:39:31 joshua sshd[3111969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.230.136 user=root show less	Port Scan
🇺🇸 decisionconcepts	2024-07-27 04:10:29 (1 year ago)	relay: Fail2Ban detected 2 attempts against sshd from: 152.249.230.136	Brute-Force SSH
Anonymous	2024-07-27 04:06:36 (1 year ago)	Jul 27 04:06:35 danbo-37e8a1 sshd[160898]: error: maximum authentication attempts exceeded for root ... show more Jul 27 04:06:35 danbo-37e8a1 sshd[160898]: error: maximum authentication attempts exceeded for root from 152.249.230.136 port 40758 ssh2 [preauth] ... show less	Brute-Force SSH
Anonymous	2024-07-27 04:00:10 (1 year ago)	SSH Brute Force Attempt	Brute-Force SSH
🇩🇪 moonheart	2024-07-27 03:36:42 (1 year ago)	2024-07-27T05:36:23.433255+02:00 berohost-6c24g sshd[35848]: Failed password for root from 152.249.2 ... show more 2024-07-27T05:36:23.433255+02:00 berohost-6c24g sshd[35848]: Failed password for root from 152.249.230.136 port 43160 ssh2 2024-07-27T05:36:29.236106+02:00 berohost-6c24g sshd[35848]: Failed password for root from 152.249.230.136 port 43160 ssh2 2024-07-27T05:36:31.651841+02:00 berohost-6c24g sshd[35848]: Failed password for root from 152.249.230.136 port 43160 ssh2 2024-07-27T05:36:35.154909+02:00 berohost-6c24g sshd[35848]: Failed password for root from 152.249.230.136 port 43160 ssh2 2024-07-27T05:36:40.768205+02:00 berohost-6c24g sshd[35848]: Failed password for root from 152.249.230.136 port 43160 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2024-07-27 03:25:23 (1 year ago)	SSH Brute force: 2 attempts were recorded from 152.249.230.136 2024-07-27T04:30:49+02:00 error: maxi ... show more SSH Brute force: 2 attempts were recorded from 152.249.230.136 2024-07-27T04:30:49+02:00 error: maximum authentication attempts exceeded for root from 152.249.230.136 port 46874 ssh2 [preauth] 2024-07-27T04:30:59+02:00 error: maximum authentication attempts exceeded for root from 152.249.230.136 port 47726 ssh2 [preauth] show less	Brute-Force SSH
🇩🇪 shr4pnel	2024-07-27 03:07:29 (1 year ago)	Jul 27 03:06:41 shrapnelnet sshd[1041732]: error: maximum authentication attempts exceeded for root ... show more Jul 27 03:06:41 shrapnelnet sshd[1041732]: error: maximum authentication attempts exceeded for root from 152.249.230.136 port 51138 ssh2 [preauth] Jul 27 03:06:50 shrapnelnet sshd[1041820]: error: maximum authentication attempts exceeded for root from 152.249.230.136 port 52132 ssh2 [preauth] Jul 27 03:07:02 shrapnelnet sshd[1042009]: error: maximum authentication attempts exceeded for root from 152.249.230.136 port 52692 ssh2 [preauth] Jul 27 03:07:22 shrapnelnet sshd[1042121]: Invalid user admin from 152.249.230.136 port 53966 Jul 27 03:07:28 shrapnelnet sshd[1042121]: error: maximum authentication attempts exceeded for invalid user admin from 152.249.230.136 port 53966 ssh2 [preauth] ... show less	Brute-Force SSH
🇸🇬 rafled	2024-07-27 00:06:17 (1 year ago)	Jul 27 00:06:15 main-v sshd[1161206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Jul 27 00:06:15 main-v sshd[1161206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.230.136 user=root Jul 27 00:06:17 main-v sshd[1161206]: Failed password for root from 152.249.230.136 port 45760 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-07-26 23:46:39 (1 year ago)	Unauthorized connection to SSH port 22	Port Scan SSH

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 71.6.240.232

🇮🇱 203.159.81.31

🇲🇦 196.89.164.37

🇺🇸 192.178.65.26

🇮🇳 103.180.212.135

🇷🇺 83.239.108.218

🇺🇸 45.79.67.28

🇺🇸 20.169.49.11

🇨🇳 203.83.238.175

🇺🇸 195.184.76.132

🇨🇦 192.99.101.114

🇺🇸 162.243.248.133

🇭🇰 118.193.38.26

🇩🇪 103.14.32.192

🇱🇺 46.151.182.58

🇸🇬 43.159.37.77

🇮🇹 5.99.196.202

🇳🇱 176.65.139.222

🇮🇳 143.110.251.21

🇮🇳 98.70.50.166