AbuseIPDB » 189.56.252.115

189.56.252.115 was found in our database!

This IP was reported 6,403 times. Confidence of Abuse is 100%: ?

100%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS10429
Domain Name	telefonica.com.br
Country	Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 189.56.252.115

Whois 189.56.252.115

IP Abuse Reports for 189.56.252.115:

This IP address has been reported a total of 6,403 times from 730 distinct sources. 189.56.252.115 was first reported on January 26th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-04-23 20:06:15 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-04-23 00:09:40 (2 days ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/189.56.252.115	SSH
rtbh.com.tr	2025-04-22 20:06:14 (2 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
space.ua	2025-04-22 02:23:43 (3 days ago)	MAIL_Brute-Force	Brute-Force
DSSYSTEMS	2025-04-22 00:09:23 (3 days ago)	Automatic report from DSS firewall log.	Port Scan Hacking Brute-Force
qtland Cloud Inc.	2025-04-21 23:59:47 (3 days ago)	2025-04-21T23:59:43.777198+00:00 eu-west-fra2-35273 sshd[3154171]: pam_unix(sshd:auth): authenticati ... show more2025-04-21T23:59:43.777198+00:00 eu-west-fra2-35273 sshd[3154171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.56.252.115 2025-04-21T23:59:45.806389+00:00 eu-west-fra2-35273 sshd[3154171]: Failed password for invalid user test from 189.56.252.115 port 40599 ssh2 2025-04-21T23:59:46.560527+00:00 eu-west-fra2-35273 sshd[3154171]: Connection closed by invalid user test 189.56.252.115 port 40599 [preauth] ... show less	Brute-Force SSH
ThreatBook.io	2025-04-21 23:59:45 (3 days ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/189.56.252.115	SSH
antihack.anarchista.xyz	2025-04-21 23:06:05 (3 days ago)	2025-04-21 23:06:04 H=(189-20-254-233.customer.tdatabrasil.net.br) [189.56.252.115] sender verify fa ... show more2025-04-21 23:06:04 H=(189-20-254-233.customer.tdatabrasil.net.br) [189.56.252.115] sender verify fail for <[email protected]>: all relevant MX records point to non-existent hosts 2025-04-21 23:06:04 H=(189-20-254-233.customer.tdatabrasil.net.br) [189.56.252.115] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed ... show less	Fraud Orders Phishing Email Spam
rtbh.com.tr	2025-04-21 20:06:13 (3 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
debaba	2025-04-21 15:43:42 (3 days ago)	2025-04-21T18:43:41.857600+03:00 phenom sshd-session[69014]: Invalid user o ...	Brute-Force SSH
Infocom	2025-04-21 14:14:06 (3 days ago)	MAIL_Brute-Force	Brute-Force
ukrpack.net	2025-04-21 06:56:34 (4 days ago)	MAIL_Brute-Force	Brute-Force
Anonymous	2025-04-21 06:08:55 (4 days ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
eskilbrun	2025-04-21 05:41:21 (4 days ago)	2025-04-21T07:41:21.174554+02:00 linode1.eskil.net postfix/smtpd[625503]: warning: unknown[189.56.25 ... show more2025-04-21T07:41:21.174554+02:00 linode1.eskil.net postfix/smtpd[625503]: warning: unknown[189.56.252.115]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2025-04-21T07:41:21.277526+02:00 linode1.eskil.net postfix/smtpd[625503]: lost connection after AUTH from unknown[189.56.252.115] 2025-04-21T07:41:21.277584+02:00 linode1.eskil.net postfix/smtpd[625503]: disconnect from unknown[189.56.252.115] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
TZNOC	2025-04-20 22:16:45 (4 days ago)	Mail credential brute-force attack (SM3) #7	Email Spam Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩