JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.252.38.135

191.252.38.135 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 0%: ?

ISP	Locaweb Serviços de Internet S/A
Usage Type	Data Center/Web Hosting/Transit
ASN	AS27715
Hostname(s)	vps57987.publiccloud.com.br
Domain Name	locaweb.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.252.38.135

Whois 191.252.38.135

IP Abuse Reports for 191.252.38.135:

This IP address has been reported a total of 128 times from 25 distinct sources. 191.252.38.135 was first reported on September 4th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-08 20:08:41 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-07 20:08:40 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-09-06 12:29:32 (11 months ago)	(sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3 ... show more (sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 6 07:26:38 15957 sshd[7302]: Invalid user samp from 191.252.38.135 port 45472 Sep 6 07:26:40 15957 sshd[7302]: Failed password for invalid user samp from 191.252.38.135 port 45472 ssh2 Sep 6 07:29:16 15957 sshd[7568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 07:29:19 15957 sshd[7568]: Failed password for root from 191.252.38.135 port 44434 ssh2 Sep 6 07:29:28 15957 sshd[7572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 12:00:53 (11 months ago)	191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] ... show more 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 6 06:45:04 14014 sshd[551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.18.76 user=root Sep 6 06:45:07 14014 sshd[551]: Failed password for root from 42.96.18.76 port 57866 ssh2 Sep 6 06:46:30 14014 sshd[632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.18.76 user=root Sep 6 07:00:30 14014 sshd[1689]: Failed password for root from 191.252.38.135 port 44916 ssh2 Sep 6 07:00:28 14014 sshd[1689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root IP Addresses Blocked: 42.96.18.76 (VN/Vietnam/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 11:30:10 (11 months ago)	191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] ... show more 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 6 06:30:03 13768 sshd[6339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 05:30:08 13768 sshd[813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.167.228.123 user=root Sep 6 05:30:10 13768 sshd[813]: Failed password for root from 168.167.228.123 port 27931 ssh2 Sep 6 05:32:42 13768 sshd[1001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.167.228.123 user=root Sep 6 05:32:43 13768 sshd[1001]: Failed password for root from 168.167.228.123 port 27932 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 10:19:09 (11 months ago)	(sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3 ... show more (sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 6 05:11:51 13957 sshd[26098]: Invalid user deploy from 191.252.38.135 port 44362 Sep 6 05:11:53 13957 sshd[26098]: Failed password for invalid user deploy from 191.252.38.135 port 44362 ssh2 Sep 6 05:18:47 13957 sshd[27025]: Invalid user admin from 191.252.38.135 port 44910 Sep 6 05:18:48 13957 sshd[27025]: Failed password for invalid user admin from 191.252.38.135 port 44910 ssh2 Sep 6 05:18:56 13957 sshd[27035]: Invalid user home from 191.252.38.135 port 49366 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 09:39:50 (11 months ago)	(sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3 ... show more (sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 6 04:36:05 16729 sshd[2433]: Invalid user hbase from 191.252.38.135 port 57502 Sep 6 04:36:07 16729 sshd[2433]: Failed password for invalid user hbase from 191.252.38.135 port 57502 ssh2 Sep 6 04:39:26 16729 sshd[2674]: Invalid user work from 191.252.38.135 port 39740 Sep 6 04:39:27 16729 sshd[2674]: Failed password for invalid user work from 191.252.38.135 port 39740 ssh2 Sep 6 04:39:37 16729 sshd[2678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 08:58:52 (11 months ago)	(sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3 ... show more (sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 6 03:54:12 15236 sshd[28324]: Invalid user spark01 from 191.252.38.135 port 44812 Sep 6 03:54:13 15236 sshd[28324]: Failed password for invalid user spark01 from 191.252.38.135 port 44812 ssh2 Sep 6 03:58:27 15236 sshd[28693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 03:58:29 15236 sshd[28693]: Failed password for root from 191.252.38.135 port 34632 ssh2 Sep 6 03:58:40 15236 sshd[28697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2025-09-06 08:52:13 (11 months ago)	ID: 4593051419 \| PORT: 52210 \| https://191-252-38-135.scanthe.net	Port Scan
🇺🇸 bigscoots.com	2025-09-06 08:30:34 (11 months ago)	191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] ... show more 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 6 03:30:25 16470 sshd[30611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.15.16.235 user=root Sep 6 03:29:00 16470 sshd[30319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.149.199 user=root Sep 6 03:29:02 16470 sshd[30319]: Failed password for root from 27.254.149.199 port 55300 ssh2 Sep 6 03:25:06 16470 sshd[29853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 03:25:08 16470 sshd[29853]: Failed password for root from 191.252.38.135 port 42360 ssh2 IP Addresses Blocked: 31.15.16.235 (NL/The Netherlands/-) 27.254.149.199 (TH/Thailand/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 08:03:13 (11 months ago)	191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] ... show more 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 6 03:02:59 17248 sshd[17042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.118.153 user=root Sep 6 03:02:24 17248 sshd[17036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.198.146.227 user=root Sep 6 03:02:26 17248 sshd[17036]: Failed password for root from 35.198.146.227 port 50974 ssh2 Sep 6 02:59:59 17248 sshd[16792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 03:00:01 17248 sshd[16792]: Failed password for root from 191.252.38.135 port 47676 ssh2 IP Addresses Blocked: 14.103.118.153 (CN/China/-) 35.198.146.227 (DE/Germany/227.146.198.35.bc.googleusercontent.com) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 07:45:34 (11 months ago)	191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] ... show more 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 6 07:45:08 23159 sshd[11909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.200.14 user=root Sep 6 07:44:51 23159 sshd[11842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 07:44:53 23159 sshd[11842]: Failed password for root from 191.252.38.135 port 56376 ssh2 Sep 6 07:05:39 23159 sshd[8993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.39 user=root Sep 6 07:05:41 23159 sshd[8993]: Failed password for root from 139.59.66.39 port 40528 ssh2 IP Addresses Blocked: 165.154.200.14 (SG/Singapore/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 07:25:49 (11 months ago)	(sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3 ... show more (sshd) Failed SSH login from 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 6 02:20:25 16305 sshd[11969]: Invalid user see from 191.252.38.135 port 41306 Sep 6 02:20:28 16305 sshd[11969]: Failed password for invalid user see from 191.252.38.135 port 41306 ssh2 Sep 6 02:25:31 16305 sshd[12329]: Invalid user babs from 191.252.38.135 port 53908 Sep 6 02:25:34 16305 sshd[12329]: Failed password for invalid user babs from 191.252.38.135 port 53908 ssh2 Sep 6 02:25:44 16305 sshd[12337]: Invalid user mxx from 191.252.38.135 port 58184 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-06 06:59:29 (11 months ago)	191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] ... show more 191.252.38.135 (BR/Brazil/vps57987.publiccloud.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 6 01:21:07 17123 sshd[17014]: Failed password for root from 45.118.146.109 port 51904 ssh2 Sep 6 01:59:18 17123 sshd[20636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 01:59:20 17123 sshd[20636]: Failed password for root from 191.252.38.135 port 53810 ssh2 Sep 6 01:53:47 17123 sshd[20190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.38.135 user=root Sep 6 01:53:49 17123 sshd[20190]: Failed password for root from 191.252.38.135 port 33866 ssh2 IP Addresses Blocked: 45.118.146.109 (VN/Vietnam/-) show less	Brute-Force SSH

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 81.25.77.238

🇮🇳 66.116.199.98

🇱🇹 213.176.26.87

🇨🇳 183.198.140.57

🇨🇳 111.225.214.189

🇸🇮 102.220.160.243

🇸🇬 54.255.211.183

🇨🇳 14.103.86.183

🇸🇪 13.51.174.122

🇺🇸 198.54.114.18

🇭🇰 188.253.126.196

🇨🇳 180.76.52.146

🇨🇳 111.225.214.186

🇺🇸 107.150.105.153

🇳🇱 104.28.155.219

🇨🇳 42.5.110.206

🇨🇳 220.181.108.176

🇺🇸 192.178.37.26

🇲🇽 189.204.230.91

🇺🇸 147.185.132.164