JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.252.159.206

191.252.159.206 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 0%: ?

ISP	Locaweb Serviços de Internet S/A
Usage Type	Data Center/Web Hosting/Transit
ASN	AS27715
Domain Name	locaweb.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.252.159.206

Whois 191.252.159.206

IP Abuse Reports for 191.252.159.206:

This IP address has been reported a total of 91 times from 40 distinct sources. 191.252.159.206 was first reported on March 29th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-02 06:00:00 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=90, sources=1)	Hacking Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-04-09 20:12:24 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-07 20:12:22 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-06 20:12:22 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-05 20:12:22 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-03 20:12:21 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-01 20:12:24 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2026-04-01 05:45:23 (3 months ago)	191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net), 5 distributed sshd attacks on account [root] in ... show more 191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 30 21:58:23 16046 sshd[2211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root Mar 30 21:58:25 16046 sshd[2211]: Failed password for root from 191.252.159.206 port 41268 ssh2 Mar 30 23:23:24 16046 sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.91.186.36 user=root Mar 30 23:23:26 16046 sshd[8316]: Failed password for root from 183.91.186.36 port 35754 ssh2 Mar 30 23:28:47 16046 sshd[8707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.91.186.36 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-31 12:48:50 (3 months ago)	191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net), 6 distributed sshd attacks on account [root] in ... show more 191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 31 12:37:29 23667 sshd[11792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.153.120 user=root Mar 31 12:28:19 23667 sshd[11137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.153.120 user=root Mar 31 12:28:22 23667 sshd[11137]: Failed password for root from 154.125.153.120 port 53846 ssh2 Mar 31 12:19:25 23667 sshd[10127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.125.153.120 user=root Mar 31 12:19:27 23667 sshd[10127]: Failed password for root from 154.125.153.120 port 53065 ssh2 Mar 31 12:48:26 23667 sshd[13245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root IP Addresses Blocked: 154.125.153.120 (SN/Senegal/-) show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-03-31 12:37:25 (3 months ago)	ID: 1884257411 \| PORT: 44327 \| https://191-252-159-206.scanthe.net	Port Scan
🇺🇸 Teknikal_Domain	2026-03-31 12:22:15 (3 months ago)	Mar 31 08:21:34 gen sshd[938313]: Failed password for root from 191.252.159.206 port 34276 ssh2 Mar ... show more Mar 31 08:21:34 gen sshd[938313]: Failed password for root from 191.252.159.206 port 34276 ssh2 Mar 31 08:22:13 gen sshd[938329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root Mar 31 08:22:14 gen sshd[938329]: Failed password for root from 191.252.159.206 port 45040 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-31 11:52:13 (3 months ago)	(sshd) Failed SSH login from 191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net): 5 in the last 3600 ... show more (sshd) Failed SSH login from 191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Mar 31 06:42:32 13584 sshd[26834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root Mar 31 06:42:34 13584 sshd[26834]: Failed password for root from 191.252.159.206 port 36224 ssh2 Mar 31 06:51:31 13584 sshd[27542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root Mar 31 06:51:33 13584 sshd[27542]: Failed password for root from 191.252.159.206 port 57462 ssh2 Mar 31 06:52:08 13584 sshd[27605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root show less	Brute-Force SSH
🇺🇦 URAN Publishing Service	2026-03-31 11:23:35 (3 months ago)	2026-03-31T11:22:18.856398+00:00 ejsmr sshd[116255]: Failed password for root from 191.252.159.206 p ... show more 2026-03-31T11:22:18.856398+00:00 ejsmr sshd[116255]: Failed password for root from 191.252.159.206 port 48372 ssh2 2026-03-31T11:22:54.958733+00:00 ejsmr sshd[116257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root 2026-03-31T11:22:57.487833+00:00 ejsmr sshd[116257]: Failed password for root from 191.252.159.206 port 56850 ssh2 2026-03-31T11:23:32.030634+00:00 ejsmr sshd[116260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root 2026-03-31T11:23:34.108518+00:00 ejsmr sshd[116260]: Failed password for root from 191.252.159.206 port 51416 ssh2 ... show less	SSH
🇦🇺 Scrapline	2026-03-31 11:21:23 (3 months ago)	[Fail2Ban] sshd: banned after 2 failures	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-31 11:14:47 (3 months ago)	191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net), 5 distributed sshd attacks on account [root] in ... show more 191.252.159.206 (BR/Brazil/grinn.vps-kinghost.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 31 06:05:45 15726 sshd[24311]: Failed password for root from 149.56.102.185 port 39220 ssh2 Mar 31 06:14:42 15726 sshd[24909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.102.185 user=root Mar 31 06:05:43 15726 sshd[24311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.102.185 user=root Mar 31 06:04:37 15726 sshd[24226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.159.206 user=root Mar 31 06:04:38 15726 sshd[24226]: Failed password for root from 191.252.159.206 port 55270 ssh2 IP Addresses Blocked: 149.56.102.185 (CA/Canada/vps-4d39c8b7.vps.ovh.ca) show less	Brute-Force SSH

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.92.162.240

🇹🇭 159.192.137.133

🇨🇳 120.48.88.69

🇺🇸 104.164.173.121

🇨🇳 42.123.126.29

🇺🇸 20.46.225.117

🇯🇵 203.25.124.164

🇺🇸 104.164.126.26

🇻🇳 103.200.23.154

🇳🇱 51.15.59.186

🇵🇪 38.250.132.103

🇹🇭 202.29.228.248

🇺🇸 198.46.199.90

🇵🇦 190.218.32.115

🇮🇩 180.252.89.17

🇨🇳 123.160.221.175

🇮🇳 103.25.47.94

🇬🇧 35.203.210.186

🇺🇸 20.169.105.164

🇹🇷 176.88.147.178