JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.63.38.9

189.63.38.9 was found in our database!

This IP was reported 284 times. Confidence of Abuse is 0%: ?

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Hostname(s)	bd3f2609.virtua.com.br
Domain Name	claro.com.br
Country	🇧🇷 Brazil
City	Aparecida de Goiania, Goias

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.63.38.9

Whois 189.63.38.9

IP Abuse Reports for 189.63.38.9:

This IP address has been reported a total of 284 times from 147 distinct sources. 189.63.38.9 was first reported on September 12th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 21:08:05 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇺🇸 sh97	2025-09-26 11:56:50 (8 months ago)	US02-RN-LAX: SSH Brute Force from 189.63.38.9 at 2025-09-26 17:26:50 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-17 20:08:51 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-16 20:08:50 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-16 01:58:54 (8 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/189.63.38.9	SSH
🇹🇷 rtbh.com.tr	2025-09-15 20:08:48 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-09-15 13:52:52 (8 months ago)	189.63.38.9 (BR/Brazil/bd3f2609.virtua.com.br), 6 distributed sshd attacks on account [root] in the ... show more 189.63.38.9 (BR/Brazil/bd3f2609.virtua.com.br), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 08:52:41 15865 sshd[25617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.38.9 user=root Sep 15 08:43:13 15865 sshd[24725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.34.210.74 user=root Sep 15 08:38:46 15865 sshd[24274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.34.210.74 user=root Sep 15 08:38:48 15865 sshd[24274]: Failed password for root from 117.34.210.74 port 49640 ssh2 Sep 15 08:31:54 15865 sshd[23778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.34.210.74 user=root Sep 15 08:31:56 15865 sshd[23778]: Failed password for root from 117.34.210.74 port 54320 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 Nerdscave Hosting	2025-09-15 13:05:54 (8 months ago)	2025-09-15T15:04:27.894364+02:00 fra-GW01 sshd[2926734]: Failed password for root from 189.63.38.9 p ... show more 2025-09-15T15:04:27.894364+02:00 fra-GW01 sshd[2926734]: Failed password for root from 189.63.38.9 port 47336 ssh2 2025-09-15T15:05:52.169596+02:00 fra-GW01 sshd[2926783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.38.9 user=root 2025-09-15T15:05:54.099515+02:00 fra-GW01 sshd[2926783]: Failed password for root from 189.63.38.9 port 42274 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-15 13:02:33 (8 months ago)	189.63.38.9 (BR/Brazil/bd3f2609.virtua.com.br), 5 distributed sshd attacks on account [root] in the ... show more 189.63.38.9 (BR/Brazil/bd3f2609.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 08:02:20 ngx sshd[1404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.38.9 user=root Sep 15 08:02:21 ngx sshd[1404]: Failed password for root from 189.63.38.9 port 59954 ssh2 Sep 15 07:26:53 ngx sshd[29240]: Failed password for root from 118.193.61.170 port 60904 ssh2 Sep 15 08:01:24 ngx sshd[1289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.34.156 user=root Sep 15 08:01:25 ngx sshd[1289]: Failed password for root from 1.95.34.156 port 51242 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 theunixguy	2025-09-15 13:00:47 (8 months ago)		Brute-Force SSH
🇳🇱 applemooz	2025-09-15 12:37:33 (8 months ago)	Sep 15 14:34:41 ns37 sshd[20968]: Failed password for root from 189.63.38.9 port 54980 ssh2 Sep 15 1 ... show more Sep 15 14:34:41 ns37 sshd[20968]: Failed password for root from 189.63.38.9 port 54980 ssh2 Sep 15 14:36:09 ns37 sshd[21116]: Failed password for root from 189.63.38.9 port 53750 ssh2 ... show less	Brute-Force SSH
🇺🇸 FABIO EGAS	2025-09-15 12:11:56 (8 months ago)	(sshd) Failed SSH login from 189.63.38.9 (BR/Brazil/bd3f2609.virtua.com.br)	Brute-Force SSH
🇳🇱 applemooz	2025-09-15 12:11:02 (8 months ago)	Sep 15 14:09:28 ns37 sshd[18996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 15 14:09:28 ns37 sshd[18996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.63.38.9 Sep 15 14:09:30 ns37 sshd[18996]: Failed password for invalid user node from 189.63.38.9 port 47794 ssh2 Sep 15 14:11:01 ns37 sshd[19126]: Failed password for root from 189.63.38.9 port 44510 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-09-15 12:09:19 (8 months ago)	SSH Brute-Force Attack	Brute-Force SSH
🇩🇪 suble.org	2025-09-15 10:59:34 (8 months ago)	2025-09-15T12:53:23.718839+02:00 swsrv sshd[2921190]: User root from 189.63.38.9 not allowed because ... show more 2025-09-15T12:53:23.718839+02:00 swsrv sshd[2921190]: User root from 189.63.38.9 not allowed because not listed in AllowUsers 2025-09-15T12:56:46.587416+02:00 swsrv sshd[2927865]: User root from 189.63.38.9 not allowed because not listed in AllowUsers 2025-09-15T12:58:10.632050+02:00 swsrv sshd[2931355]: User root from 189.63.38.9 not allowed because not listed in AllowUsers 2025-09-15T12:59:34.315237+02:00 swsrv sshd[2931400]: User root from 189.63.38.9 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH

Showing 1 to 15 of 284 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.79.218.164

🇳🇱 178.128.248.249

🇺🇸 147.185.132.241

🇨🇳 120.48.114.235

🇭🇰 103.45.68.123

🇺🇸 64.62.156.123

🇺🇸 64.62.156.122

🇮🇪 54.78.155.243

🇮🇩 36.64.190.82

🇺🇸 34.186.42.196

🇯🇵 8.216.6.189

🇺🇸 2607:f8b0:4001:c5f::123

🇺🇸 2607:f8b0:4001:c56::121

🇰🇷 210.118.224.138

🇧🇷 205.210.31.148

🇭🇰 199.45.154.123

🇩🇪 185.242.3.231

🇺🇸 162.216.149.216

🇩🇪 162.62.58.193

🇻🇳 125.212.217.143