JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.189.252.138

199.189.252.138 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	HostLab LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205431
Domain Name	hostlab.kz
Country	🇰🇿 Kazakhstan
City	Almaty, Almaty

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.189.252.138

Whois 199.189.252.138

IP Abuse Reports for 199.189.252.138:

This IP address has been reported a total of 47 times from 31 distinct sources. 199.189.252.138 was first reported on July 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-13 05:11:55 (4 days ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 nohacefaltapapel-et.net	2026-07-10 04:55:19 (1 week ago)	2026-07-10T04:47:06.823298front1 sshd[1333]: Invalid user stp from 199.189.252.138 port 33522 2026-0 ... show more 2026-07-10T04:47:06.823298front1 sshd[1333]: Invalid user stp from 199.189.252.138 port 33522 2026-07-10T04:53:19.217342front1 sshd[7017]: Invalid user ubuntu from 199.189.252.138 port 29856 2026-07-10T04:55:18.917766front1 sshd[8933]: Invalid user tempuser from 199.189.252.138 port 44248 ... show less	Brute-Force SSH
🇨🇦 KIsmay	2026-07-10 04:53:55 (1 week ago)	Jul 9 21:51:48 ismay sshd[80749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 9 21:51:48 ismay sshd[80749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.189.252.138 user=root Jul 9 21:51:50 ismay sshd[80749]: Failed password for root from 199.189.252.138 port 15816 ssh2 Jul 9 21:53:53 ismay sshd[80804]: Invalid user ubuntu from 199.189.252.138 port 62030 Jul 9 21:53:53 ismay sshd[80804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.189.252.138 Jul 9 21:53:54 ismay sshd[80804]: Failed password for invalid user ubuntu from 199.189.252.138 port 62030 ssh2 ... show less	Brute-Force SSH
🇬🇧 yvoictra	2026-07-10 04:47:36 (1 week ago)	2026-07-10T06:47:36.054814+02:00 vinaca sshd-session[3207096]: Invalid user stp from 199.189.252.138 ... show more 2026-07-10T06:47:36.054814+02:00 vinaca sshd-session[3207096]: Invalid user stp from 199.189.252.138 port 46168 ... show less	Brute-Force SSH
🇺🇸 paradoxnetworks	2026-07-10 04:43:23 (1 week ago)	2026-07-10T04:41:17.195118+00:00 edge-con-mia01.int.pdx.net.uk sshd[2682058]: Failed password for ro ... show more 2026-07-10T04:41:17.195118+00:00 edge-con-mia01.int.pdx.net.uk sshd[2682058]: Failed password for root from 199.189.252.138 port 46564 ssh2 2026-07-10T04:43:21.306424+00:00 edge-con-mia01.int.pdx.net.uk sshd[2697175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.189.252.138 user=root 2026-07-10T04:43:22.890431+00:00 edge-con-mia01.int.pdx.net.uk sshd[2697175]: Failed password for root from 199.189.252.138 port 14212 ssh2 ... show less	Brute-Force SSH
🇳🇱 GabrielJST	2026-07-10 04:39:41 (1 week ago)	(sshd) Failed SSH login from 199.189.252.138 (KZ/Kazakhstan/tvinkoltoss.hlab.kz)	Brute-Force SSH
🇩🇪 pianoman911	2026-07-10 04:04:30 (1 week ago)	Jul 10 05:57:00 bigpie sshd[3030750]: Invalid user ali from 199.189.252.138 port 43662 Jul 10 05:58: ... show more Jul 10 05:57:00 bigpie sshd[3030750]: Invalid user ali from 199.189.252.138 port 43662 Jul 10 05:58:49 bigpie sshd[3056629]: Invalid user nikola from 199.189.252.138 port 47942 Jul 10 06:00:45 bigpie sshd[3087182]: Invalid user edwin from 199.189.252.138 port 20420 Jul 10 06:02:42 bigpie sshd[3114887]: Invalid user alberto from 199.189.252.138 port 47066 Jul 10 06:04:30 bigpie sshd[3140720]: Invalid user ftp_user from 199.189.252.138 port 38510 ... show less	Brute-Force SSH
🇩🇪 pianoman911	2026-07-10 03:08:51 (1 week ago)	Jul 10 04:59:55 bigpie sshd[2220937]: Invalid user azureuser from 199.189.252.138 port 43474 Jul 10 ... show more Jul 10 04:59:55 bigpie sshd[2220937]: Invalid user azureuser from 199.189.252.138 port 43474 Jul 10 05:01:40 bigpie sshd[2249430]: Invalid user netcool from 199.189.252.138 port 57392 Jul 10 05:05:24 bigpie sshd[2301979]: Invalid user sysadmin from 199.189.252.138 port 53090 Jul 10 05:07:07 bigpie sshd[2327043]: Invalid user runner from 199.189.252.138 port 41388 Jul 10 05:08:51 bigpie sshd[2350425]: Invalid user bitrix from 199.189.252.138 port 27728 ... show less	Brute-Force SSH
🇩🇪 Click-Networks	2026-07-10 02:09:52 (1 week ago)	2026-07-10T02:39:26.967780+02:00 pve sshd-session[643324]: Received disconnect from 199.189.252.138 ... show more 2026-07-10T02:39:26.967780+02:00 pve sshd-session[643324]: Received disconnect from 199.189.252.138 port 13034:11: Bye Bye [preauth] 2026-07-10T02:39:26.968675+02:00 pve sshd-session[643324]: Disconnected from authenticating user root 199.189.252.138 port 13034 [preauth] 2026-07-10T02:50:43.619922+02:00 pve sshd-session[747284]: Invalid user chris from 199.189.252.138 port 28592 2026-07-10T02:50:43.719009+02:00 pve sshd-session[747284]: Received disconnect from 199.189.252.138 port 28592:11: Bye Bye [preauth] 2026-07-10T02:50:43.719131+02:00 pve sshd-session[747284]: Disconnected from invalid user chris 199.189.252.138 port 28592 [preauth] 2026-07-10T02:52:58.291347+02:00 pve sshd-session[771166]: Received disconnect from 199.189.252.138 port 31168:11: Bye Bye [preauth] 2026-07-10T02:52:58.291877+02:00 pve sshd-session[771166]: Disconnected from authenticating user root 199.189.252.138 port 31168 [preauth] 2026-07-10T02:55:15.880623+02:00 pve sshd-session[790040]: Received disconnect f show less	Brute-Force Exploited Host SSH
🇨🇦 craftxbox	2026-07-10 01:19:48 (1 week ago)	Jul 10 00:52:24 mail sshd[3690929]: Invalid user chris from 199.189.252.138 port 50700 Jul 10 01:10: ... show more Jul 10 00:52:24 mail sshd[3690929]: Invalid user chris from 199.189.252.138 port 50700 Jul 10 01:10:52 mail sshd[3691397]: Invalid user ahmad from 199.189.252.138 port 38056 Jul 10 01:13:06 mail sshd[3691480]: Invalid user ubuntu from 199.189.252.138 port 64688 Jul 10 01:15:22 mail sshd[3691492]: Invalid user tania from 199.189.252.138 port 42336 Jul 10 01:19:47 mail sshd[3691520]: Invalid user git from 199.189.252.138 port 23030 ... show less	Brute-Force SSH
🇩🇪 Panter	2026-07-10 01:11:35 (1 week ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
🇫🇷 ak47suk1.my	2026-07-10 00:52:08 (1 week ago)	2026-07-10T00:52:05.386377xvmon sshd[395589]: Invalid user chris from 199.189.252.138 port 21984 202 ... show more 2026-07-10T00:52:05.386377xvmon sshd[395589]: Invalid user chris from 199.189.252.138 port 21984 2026-07-10T00:52:05.390144xvmon sshd[395589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.189.252.138 2026-07-10T00:52:07.310899xvmon sshd[395589]: Failed password for invalid user chris from 199.189.252.138 port 21984 ssh2 ... show less	Brute-Force SSH
🇺🇸 COMPLEX	2026-07-10 00:41:41 (1 week ago)	Banned by Multi Agent · node …391q · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇮🇩 Diskominfo Lumajang	2026-07-10 00:30:05 (1 week ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=3	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-09 23:03:03 (1 week ago)	199.189.252.138 (KZ/Kazakhstan/tvinkoltoss.hlab.kz), 5 distributed sshd attacks on account [root] in ... show more 199.189.252.138 (KZ/Kazakhstan/tvinkoltoss.hlab.kz), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 9 18:01:40 14974 sshd[18707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.144.166 user=root Jul 9 18:01:42 14974 sshd[18707]: Failed password for root from 217.160.144.166 port 35526 ssh2 Jul 9 18:01:54 14974 sshd[18759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.189.252.138 user=root Jul 9 18:01:56 14974 sshd[18759]: Failed password for root from 199.189.252.138 port 60350 ssh2 Jul 9 18:02:47 14974 sshd[19290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.225.252 user=root IP Addresses Blocked: 217.160.144.166 (DE/Germany/-) show less	Brute-Force SSH

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.22

🇲🇾 47.250.134.160

🇹🇼 198.235.24.126

🇪🇹 196.188.226.255

🇺🇸 147.185.132.96

🇺🇸 132.196.30.22

🇨🇳 120.55.65.26

🇺🇸 104.234.19.34

🇩🇪 89.39.121.98

🇺🇸 45.156.129.166

🇮🇳 27.97.219.82

🇮🇳 206.189.141.253

🇬🇧 185.247.137.44

🇳🇱 172.94.9.107

🇯🇵 152.32.201.217

🇮🇹 151.75.10.46

🇺🇸 147.185.132.162

🇺🇸 138.199.10.16

🇳🇱 92.63.197.5

🇨🇦 85.217.149.65