JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.252.229.137

191.252.229.137 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 76%: ?

76%

ISP	Locaweb Serviços de Internet S/A
Usage Type	Data Center/Web Hosting/Transit
ASN	AS27715
Hostname(s)	ip-191-252-229-137.sp01.cs.publiccloud.com.br
Domain Name	locaweb.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.252.229.137

Whois 191.252.229.137

IP Abuse Reports for 191.252.229.137:

This IP address has been reported a total of 12 times from 12 distinct sources. 191.252.229.137 was first reported on July 2nd 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-02 20:59:14 (21 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 ipoac.nl	2026-07-02 20:54:39 (21 hours ago)	[Thu Jul 02 22:54:38.832532 2026] [core:error] [pid 1204533:tid 1204867] [client 191.252.229.137:415 ... show more [Thu Jul 02 22:54:38.832532 2026] [core:error] [pid 1204533:tid 1204867] [client 191.252.229.137:41574] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) show less	Hacking
🇺🇸 bigscoots.com	2026-07-02 20:47:03 (21 hours ago)	(sshd) Failed SSH login from 191.252.229.137 (BR/Brazil/ip-191-252-229-137.sp01.cs.publiccloud.com.b ... show more (sshd) Failed SSH login from 191.252.229.137 (BR/Brazil/ip-191-252-229-137.sp01.cs.publiccloud.com.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 2 15:45:34 13969 sshd[30451]: Invalid user admin from 191.252.229.137 port 42328 Jul 2 15:45:36 13969 sshd[30451]: Failed password for invalid user admin from 191.252.229.137 port 42328 ssh2 Jul 2 15:46:11 13969 sshd[30914]: Invalid user orangepi from 191.252.229.137 port 39992 Jul 2 15:46:12 13969 sshd[30914]: Failed password for invalid user orangepi from 191.252.229.137 port 39992 ssh2 Jul 2 15:46:44 13969 sshd[31107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.229.137 user=root show less	Brute-Force SSH
🇺🇸 Zeeaster	2026-07-02 20:21:29 (21 hours ago)	abuse-sshd h1	Brute-Force SSH
🇳🇱 Savvii	2026-07-02 20:20:24 (21 hours ago)	20 attempts against mh-ssh on storm	Brute-Force SSH
🇺🇦 Luk	2026-07-02 20:16:02 (21 hours ago)	Jul 2 23:14:56 box sshd-session[9914]: Invalid user admin from 191.252.229.137 port 38122 Jul 2 23 ... show more Jul 2 23:14:56 box sshd-session[9914]: Invalid user admin from 191.252.229.137 port 38122 Jul 2 23:14:56 box sshd-session[9914]: Connection closed by invalid user admin 191.252.229.137 port 38122 [preauth] Jul 2 23:15:29 box sshd-session[9918]: Invalid user orangepi from 191.252.229.137 port 57454 Jul 2 23:15:29 box sshd-session[9918]: Connection closed by invalid user orangepi 191.252.229.137 port 57454 [preauth] Jul 2 23:16:01 box sshd-session[9920]: Connection closed by authenticating user root 191.252.229.137 port 33118 [preauth] ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-07-02 20:14:16 (21 hours ago)	SSH bruteforce [BY]	SSH
Anonymous	2026-07-02 19:54:54 (22 hours ago)	(sshd) Failed SSH login from 191.252.229.137 (BR/Brazil/ip-191-252-229-137.sp01.cs.publiccloud.com.b ... show more (sshd) Failed SSH login from 191.252.229.137 (BR/Brazil/ip-191-252-229-137.sp01.cs.publiccloud.com.br) show less	Brute-Force SSH
🇹🇷 Threat.live	2026-07-02 19:40:02 (22 hours ago)	Suspicious Connection Attempts	Brute-Force
🇮🇪 AutosOnShow	2026-07-02 19:34:06 (22 hours ago)	blocked for webapp attack \| path requested: /index.php \| seen at 2026-07-02 19:33:30.460 \|	Web App Attack
Anonymous	2026-07-02 19:32:10 (22 hours ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-07-02 12:35:02 (1 day ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2001:67c:e60:c0c:192:42:116:104

🇨🇳 113.201.65.26

🇸🇳 41.82.50.218

🇺🇸 208.84.102.179

🇮🇳 139.59.6.237

🇭🇰 13.70.1.178

🇸🇬 2a04:c607:33:8:9999::138

🇰🇷 222.121.250.203

🇰🇷 210.183.21.53

🇺🇦 178.151.245.162

🇺🇸 156.146.39.174

🇫🇷 92.205.213.181

🇷🇴 92.118.39.14

🇱🇹 62.60.130.219

🇧🇿 45.227.254.155

🇬🇷 31.152.207.48

🇯🇵 20.63.222.120

🇸🇬 4.193.210.218

🇺🇸 212.227.239.101

🇺🇸 205.210.31.56