JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.38.41.252

187.38.41.252 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Hostname(s)	bb2629fc.virtua.com.br
Domain Name	claro.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.38.41.252

Whois 187.38.41.252

IP Abuse Reports for 187.38.41.252:

This IP address has been reported a total of 14 times from 9 distinct sources. 187.38.41.252 was first reported on November 2nd 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Locaweb	2024-12-16 12:41:00 (1 year ago)	hacking	Fraud Orders Phishing Web Spam Hacking
🇧🇷 SvrAdmin	2024-11-07 07:28:59 (1 year ago)	[101] (smtpauth) Failed SMTP AUTH login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 5 in ... show more [101] (smtpauth) Failed SMTP AUTH login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-11-07 04:28:39 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:64654: 535 Incorrect authentication data ([email protected]) 2024-11-07 04:28:46 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:64677: 535 Incorrect authentication data ([email protected]) 2024-11-07 04:28:52 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:64759: 535 Incorrect authentication data ([email protected]) 2024-11-07 04:28:54 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:64811: 535 Incorrect authentication data ([email protected]) 2024-11-07 04:28:56 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:64836: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇧🇷 SvrAdmin	2024-11-06 19:11:25 (1 year ago)	[101] (smtpauth) Failed SMTP AUTH login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 5 in ... show more [101] (smtpauth) Failed SMTP AUTH login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-11-06 16:11:01 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:53143: 535 Incorrect authentication data ([email protected]) 2024-11-06 16:11:08 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:53175: 535 Incorrect authentication data ([email protected]) 2024-11-06 16:11:15 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:53228: 535 Incorrect authentication data ([email protected]) 2024-11-06 16:11:17 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:53344: 535 Incorrect authentication data ([email protected]) 2024-11-06 16:11:19 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:53382: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2024-11-06 16:30:08 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2024-11-04 18:41:07 (1 year ago)	(PERMBLOCK) 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br) has had more than 4 temp blocks in the ... show more (PERMBLOCK) 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br) has had more than 4 temp blocks in the last 86400 secs; IP: 187.38.41.252; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Email Spam Brute-Force
Anonymous	2024-11-04 05:55:22 (1 year ago)	BruteForce IMAP/POP3	Brute-Force
Anonymous	2024-11-04 04:20:08 (1 year ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 187.38.41.252, Reason:[(zimbra-mta) Failed login from ... show more Cluster member 10.170.91.37 (-) said, TEMPDENY 187.38.41.252, Reason:[(zimbra-mta) Failed login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 30 in the last 3600 secs]; IP: 187.38.41.252; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
🇧🇷 LM Security	2024-11-03 17:45:02 (1 year ago)	2024-11-03 14:44:00 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:62905: ... show more 2024-11-03 14:44:00 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:62905: 535 Incorrect authentication data (set_id=ana.gava@[redacted].com.br) 2024-11-03 12:35:25 dovecot_login authenticator failed for (DESKTOP-4PLI0U3) [187.38.41.252]:55425: 535 Incorrect authentication data (set_id=jorge.daros@[redacted].com.br) show less	Brute-Force
Anonymous	2024-11-03 16:30:06 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇧🇷 SvrAdmin	2024-11-03 13:54:40 (1 year ago)	[138] (smtpauth) Failed SMTP AUTH login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 5 in ... show more [138] (smtpauth) Failed SMTP AUTH login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Nov 3 10:54:19 cwp postfix/smtpd[15786]: warning: unknown[187.38.41.252]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 3 10:54:25 cwp postfix/smtpd[15786]: warning: unknown[187.38.41.252]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 3 10:54:32 cwp postfix/smtpd[15786]: warning: unknown[187.38.41.252]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 3 10:54:34 cwp postfix/smtpd[15786]: warning: unknown[187.38.41.252]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 3 10:54:36 cwp postfix/smtpd[15786]: warning: unknown[187.38.41.252]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan Hacking Brute-Force Exploited Host
🇺🇸 hostseries	2024-11-03 11:33:05 (1 year ago)	Trigger: LF_DISTATTACK	Brute-Force
🇧🇷 KingHost	2024-11-03 03:50:04 (1 year ago)		Brute-Force
Anonymous	2024-11-03 03:42:48 (1 year ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 187.38.41.252, Reason:[(zimbra-mta) Failed login from ... show more Cluster member 10.170.91.37 (-) said, TEMPDENY 187.38.41.252, Reason:[(zimbra-mta) Failed login from 187.38.41.252 (BR/Brazil/bb2629fc.virtua.com.br): 30 in the last 3600 secs]; IP: 187.38.41.252; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
🇨🇦 Julio Covolato	2024-11-02 18:15:01 (1 year ago)	Imap or Submission login brute-force attacks.	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 66.116.205.19

🇭🇰 185.227.153.56

🇺🇸 167.172.245.177

🇺🇬 154.227.129.121

🇺🇸 141.11.88.12

🇺🇸 107.150.103.60

🇳🇱 86.54.31.46

🇺🇸 43.130.90.166

🇬🇧 35.203.210.219

🇺🇸 20.163.39.86

🇨🇳 223.109.49.232

🇰🇷 222.97.195.179

🇧🇷 205.210.31.186

🇬🇧 193.163.125.248

🇬🇧 193.35.56.108

🇲🇴 182.93.50.90

🇳🇱 176.65.139.181

🇨🇳 171.8.85.244

🇺🇸 164.92.82.91

🇸🇪 155.4.245.222