JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.227.91.248

148.227.91.248 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Starlink Brazil Serviços de Internet Ltd
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.brsabra1.isp.starlink.com
Domain Name	starlink.com
Country	🇧🇷 Brazil
City	Brasilia, Federal District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.227.91.248

Whois 148.227.91.248

IP Abuse Reports for 148.227.91.248:

This IP address has been reported a total of 40 times from 36 distinct sources. 148.227.91.248 was first reported on December 18th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-09 08:29:03 (1 hour ago)	Attack to Postfix SASL, bad guys	Brute-Force
Anonymous	2026-07-09 05:29:37 (4 hours ago)	(UserAttack) User Attack From 148.227.91.248 (BR/Brazil/customer.brsabra1.isp.starlink.com): 1 in t ... show more (UserAttack) User Attack From 148.227.91.248 (BR/Brazil/customer.brsabra1.isp.starlink.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-07-09 05:29:32 auth_login authenticator failed for ([149.54.33.150]) [148.227.91.248]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
Anonymous	2026-07-09 05:04:45 (4 hours ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 singertc	2026-07-09 04:32:53 (5 hours ago)	2026-07-09 06:32:52 login_server authenticator failed for (89-233-203-159.cust.bredband2.com) [148.2 ... show more 2026-07-09 06:32:52 login_server authenticator failed for (89-233-203-159.cust.bredband2.com) [148.227.91.248]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force Hacking
🇬🇧 D3monite	2026-07-09 04:30:14 (5 hours ago)	Attempted Brute Force (dovecot)	Brute-Force
🇩🇪 Paul Smith	2026-07-09 04:14:41 (5 hours ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
Anonymous	2026-07-09 04:07:50 (5 hours ago)	bruteforce	Brute-Force
🇩🇪 Lino Project	2026-07-09 03:38:44 (6 hours ago)	2026-07-09T05:38:40.841432+02:00 srv2.stefanolazzaro.ovh postfix/smtpd[1265662]: warning: unknown[14 ... show more 2026-07-09T05:38:40.841432+02:00 srv2.stefanolazzaro.ovh postfix/smtpd[1265662]: warning: unknown[148.227.91.248]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
🇩🇪 kreativstrecke	2026-07-09 03:27:00 (6 hours ago)	2026-07-09T05:26:59.430018+02:00 srv03 postfix/submission/smtpd[2780459]: warning: unknown[148.227.9 ... show more 2026-07-09T05:26:59.430018+02:00 srv03 postfix/submission/smtpd[2780459]: warning: unknown[148.227.91.248]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
Anonymous	2026-07-09 02:56:37 (6 hours ago)	Authentication failure	Brute-Force
🇩🇪 localhost-admin	2026-07-09 02:50:08 (6 hours ago)	Unauthorized connection attempt detected, SMTP Brute-Force	Brute-Force
Anonymous	2026-07-09 02:09:19 (7 hours ago)	2026-07-08 21:44:09,287 INFO [qtp1489092624-1511:smtp://m.nims.edu.gh:7073/service/admin/soap/] [oi ... show more 2026-07-08 21:44:09,287 INFO [qtp1489092624-1511:smtp://m.nims.edu.gh:7073/service/admin/soap/] [oip=148.227.91.248;oport=55380;oproto=smtp;soapId=278deb67;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2026-07-08 21:44:09,287 INFO [qtp1489092624-1511:smtp://m.nims.edu.gh:7073/service/admin/soap/] [oip=148.227.91.248;oport=55380;oproto=smtp;soapId=278deb67;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found 2026-07-09 00:12:23,985 INFO [qtp1489092624-1645:smtp://m.nims.edu.gh:7073/service/admin/soap/] [oip=148.227.91.248;oport=30820;oproto=smtp;soapId=278debc7;] account - Error occurred during authentication: authentication failed for [candy-syble]. Reason: account not found. 2026-07-09 00:12:23,986 INFO [qtp1489092624-1645:smtp://m.nims.edu.gh:7073/service/admin/soap/] [oip=148.227.91.248;oport=30820;oproto=smtp;soapId=278debc7;] SoapE ... show less	Brute-Force Web App Attack
🇵🇱 pshost.pl	2026-07-09 01:02:43 (8 hours ago)	2026-07-09T01:02:42.916Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-07-09T01:02:42.916Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 148.227.91.248. show less	Port Scan Brute-Force SSH
🇩🇪 kreativstrecke	2026-07-09 00:30:26 (9 hours ago)	2026-07-09T02:30:24.384213+02:00 srv03 postfix/submission/smtpd[2725007]: warning: unknown[148.227.9 ... show more 2026-07-09T02:30:24.384213+02:00 srv03 postfix/submission/smtpd[2725007]: warning: unknown[148.227.91.248]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇵🇱 TheWojtek	2026-07-08 23:50:27 (9 hours ago)	Jul 9 01:50:27 hq postfix/submission/smtpd[2868147]: warning: unknown[148.227.91.248]: SASL LOGIN a ... show more Jul 9 01:50:27 hq postfix/submission/smtpd[2868147]: warning: unknown[148.227.91.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.9.49

🇮🇩 202.51.214.99

🇧🇷 201.148.164.220

🇺🇸 192.169.202.129

🇧🇷 191.237.255.150

🇹🇼 118.194.252.168

🇻🇳 103.7.41.117

🇺🇸 76.79.213.70

🇱🇹 45.227.254.170

🇺🇸 44.22.167.111

🇺🇸 2001:470:1:332::6

🇵🇱 176.53.159.197

🇺🇸 156.146.47.238

🇺🇸 66.132.195.111

🇱🇹 62.60.130.219

🇺🇸 44.48.46.195

🇮🇳 168.144.151.151

🇺🇸 165.22.164.107

🇺🇸 136.111.229.89

🇺🇸 44.81.152.151