JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.52.49.191

201.52.49.191 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 0%: ?

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Hostname(s)	c93431bf.virtua.com.br
Domain Name	claro.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.52.49.191

Whois 201.52.49.191

IP Abuse Reports for 201.52.49.191:

This IP address has been reported a total of 162 times from 104 distinct sources. 201.52.49.191 was first reported on August 13th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-05-01 18:44:27 (2 months ago)	tcp/23	Port Scan
🇩🇪 bescared	2026-05-01 18:32:46 (2 months ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-	Port Scan
🇺🇸 xmission.com	2026-05-01 18:24:02 (2 months ago)	Blocked by UFW (TCP on 23) Source port: 60291 TTL: 46 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 60291 TTL: 46 Packet length: 40 TOS: 0x08 This report (for 201.52.49.191) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-05-01 18:10:03 (2 months ago)	2026-05-01 18:10:03 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇹🇷 rtbh.com.tr	2025-09-03 20:08:35 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-02 20:08:34 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-01 23:02:19 (10 months ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/201.52.49.191	Brute-Force
🇫🇷 LRob	2025-09-01 17:30:01 (10 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇳🇴 kipfel★	2025-09-01 17:28:41 (10 months ago)	2025-09-01T19:23:48.216288+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1534170]: Invalid user alex from 201 ... show more 2025-09-01T19:23:48.216288+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1534170]: Invalid user alex from 201.52.49.191 port 38110 2025-09-01T19:27:05.382746+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1534182]: Invalid user sandra from 201.52.49.191 port 45506 2025-09-01T19:28:40.489122+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1534244]: Invalid user pascal from 201.52.49.191 port 39836 ... show less	Brute-Force SSH
🇬🇧 [email protected]	2025-09-01 17:25:21 (10 months ago)	2025-09-01T17:25:17.142188+00:00 arya sshd[3194854]: pam_unix(sshd:auth): authentication failure; lo ... show more 2025-09-01T17:25:17.142188+00:00 arya sshd[3194854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.52.49.191 2025-09-01T17:25:18.866548+00:00 arya sshd[3194854]: Failed password for invalid user alex from 201.52.49.191 port 41508 ssh2 2025-09-01T17:25:20.568405+00:00 arya sshd[3194854]: Disconnected from invalid user alex 201.52.49.191 port 41508 [preauth] ... show less	Brute-Force SSH
🇨🇦 KIsmay	2025-09-01 17:23:33 (10 months ago)	Sep 1 10:21:52 ismay sshd[2590234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 1 10:21:52 ismay sshd[2590234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.52.49.191 user=root Sep 1 10:21:55 ismay sshd[2590234]: Failed password for root from 201.52.49.191 port 32840 ssh2 Sep 1 10:23:31 ismay sshd[2590420]: Invalid user adminuser from 201.52.49.191 port 49610 Sep 1 10:23:31 ismay sshd[2590420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.52.49.191 Sep 1 10:23:33 ismay sshd[2590420]: Failed password for invalid user adminuser from 201.52.49.191 port 49610 ssh2 ... show less	Brute-Force SSH
🇱🇻 alliance	2025-09-01 17:22:14 (10 months ago)	Sep 1 20:22:10 *** sshd[2190752]: Invalid user alex from 201.52.49.191 port 53034	Brute-Force SSH
🇩🇪 ghostwarriors	2025-09-01 17:20:15 (10 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇰🇷 edisonjwa	2025-09-01 17:13:11 (10 months ago)	2025-09-02T02:06:18.686070+09:00 instance-20210712-1304 sshd[688793]: Invalid user montse from 201.5 ... show more 2025-09-02T02:06:18.686070+09:00 instance-20210712-1304 sshd[688793]: Invalid user montse from 201.52.49.191 port 53452 2025-09-02T02:08:04.077402+09:00 instance-20210712-1304 sshd[689143]: Invalid user ftpuser from 201.52.49.191 port 51034 2025-09-02T02:09:44.482494+09:00 instance-20210712-1304 sshd[689425]: Invalid user myftp from 201.52.49.191 port 47844 2025-09-02T02:11:25.586822+09:00 instance-20210712-1304 sshd[689742]: Invalid user radmin from 201.52.49.191 port 45218 2025-09-02T02:13:09.874455+09:00 instance-20210712-1304 sshd[690021]: Invalid user alex from 201.52.49.191 port 42642 ... show less	Port Scan Brute-Force SSH
🇮🇩 Diskominfo Lumajang	2025-09-01 17:10:04 (10 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=5	Brute-Force SSH

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.24.238.120

🇱🇹 194.165.16.164

🇩🇪 69.5.169.189

🇲🇽 187.187.226.115

🇺🇸 167.172.144.163

🇭🇰 124.156.157.91

🇬🇧 109.74.197.83

🇭🇰 101.32.76.220

🇭🇰 47.243.195.79

🇭🇰 47.238.246.179

🇳🇱 45.148.10.141

🇺🇸 159.148.218.207

🇲🇽 143.105.29.2

🇨🇳 122.224.205.42

🇨🇳 118.249.191.163

🇵🇰 111.88.239.83

🇵🇰 103.57.224.219

🇺🇸 91.230.168.54

🇹🇭 58.82.140.115

🇺🇸 45.61.187.220