AbuseIPDB » 191.252.113.113

191.252.113.113 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 31%: ?

31%

ISP	Locaweb Serviços de Internet S/A
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vps54749.publiccloud.com.br
Domain Name	locaweb.com.br
Country	Brazil
City	Sao Paulo, Sao Paulo

Report 191.252.113.113

Whois 191.252.113.113

IP Abuse Reports for 191.252.113.113:

This IP address has been reported a total of 11 times from 11 distinct sources. 191.252.113.113 was first reported on October 6th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
nv	2024-11-09 11:24:48 (3 weeks ago)	191.252.113.113 - - [09/Nov/2024:12:24:48 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" ... show more191.252.113.113 - - [09/Nov/2024:12:24:48 +0100] "GET /administrator/pma/index.php?lang=en HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Web App Attack
[email protected]	2024-11-09 09:05:34 (3 weeks ago)	Brute force 93 attempts	DDoS Attack SQL Injection Brute-Force SSH
Mr-Money	2024-11-09 08:56:48 (3 weeks ago)	4:12:09191.252.113.113 - - [09/Nov/2024:09:56:45 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1 ... show more4:12:09191.252.113.113 - - [09/Nov/2024:09:56:45 +0100] "GET /phpmyadmin4/index.php?lang=en HTTP/1.1" 404 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 4:12:09191.252.113.113 - - [09/Nov/2024:09:56:47 +0100] "GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 4:12:09191.252.113.113 - - [09/Nov/2024:09:56:48 +0100] "GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1" 404 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
www.gregorymariani.com	2024-11-08 01:41:30 (3 weeks ago)	191.252.113.113 - - [08/Nov/2024:02:41:28 +0100] "GET /phpmyadmin2021/index.php?lang=en HTTP/1.1" 30 ... show more191.252.113.113 - - [08/Nov/2024:02:41:28 +0100] "GET /phpmyadmin2021/index.php?lang=en HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 191.252.113.113 - - [08/Nov/2024:02:41:29 +0100] "GET /phpmyadmin2021/index.php?lang=en HTTP/1.1" 404 159 "http://80.118.219.108/phpmyadmin2021/index.php?lang=en" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 191.252.113.113 - - [08/Nov/2024:02:41:29 +0100] "GET /phpMyAdmin-5.2.0-all-languages/index.php?lang=en HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" show less	Brute-Force SSH
sglorch.de	2024-11-01 13:07:06 (1 month ago)	2024-11-01 14:07:03 54496 [Warning] Access denied for user 'root'@'vps54749.publicclo ... show more2024-11-01 14:07:03 54496 [Warning] Access denied for user 'root'@'vps54749.publiccloud.com.br' (using password: YES) 2024-11-01 14:07:03 54497 [Warning] Access denied for user 'root'@'vps54749.publiccloud.com.br' (using password: YES) 2024-11-01 14:07:04 54498 [Warning] Access denied for user 'root'@'vps54749.publiccloud.com.br' (using password: YES) 2024-11-01 14:07:05 54499 [Warning] Access denied for user 'root'@'vps54749.publiccloud.com.br' (using password: YES) 2024-11-01 14:07:05 54500 [Warning] Access denied for user 'root'@'vps54749.publiccloud.com.br' (using password: YES) ... show less	Brute-Force
Anonymous	2024-10-24 12:13:24 (1 month ago)		Web App Attack
Anonymous	2024-10-24 11:30:30 (1 month ago)	Excessive HTTP/HTTPS connections.	Bad Web Bot
opso.it	2024-10-22 14:30:08 (1 month ago)	Tue Oct 22 16:29:31 2024 \[pid 6175\] \[trash\] FAIL LOGIN: Client \"191.252.113.113\" Tue Oct ... show moreTue Oct 22 16:29:31 2024 \[pid 6175\] \[trash\] FAIL LOGIN: Client \"191.252.113.113\" Tue Oct 22 16:29:48 2024 \[pid 6180\] \[wordpress\] FAIL LOGIN: Client \"191.252.113.113\" Tue Oct 22 16:29:55 2024 \[pid 6186\] \[web\] FAIL LOGIN: Client \"191.252.113.113\" Tue Oct 22 16:30:00 2024 \[pid 6190\] \[www\] FAIL LOGIN: Client \"191.252.113.113\" Tue Oct 22 16:30:05 2024 \[pid 6406\] \[httpadmin\] FAIL LOGIN: Client \"191.252.113.113\" show less	FTP Brute-Force
KPS	2024-10-15 20:31:16 (1 month ago)	PortscanN	Port Scan
webbfabriken	2024-10-07 01:55:14 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
www.unitiz.com	2024-10-06 17:02:59 (1 month ago)	Probing non-existent URLs	Bad Web Bot Web App Attack