148.3.16.76

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
93% Critical
51 reports
40 reporters · latest 2 weeks ago
ISP
VODAFONE ESPANA S.A.U.
Usage Type
Fixed Line ISP
ASN
AS12430
Domain Name
vodafone.es
Country
🇪🇸 Spain
City
Madrid, Madrid
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 40 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 18 🇺🇸 United States of America 16 🇫🇷 France 3
Most common categories Port Scan 37 Brute-Force 17 Hacking 12 IoT Targeted 7 SSH 5
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=23 DPT=23
Port Scan
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=23 DPT=23
Port Scan
🇩🇪 IVski.com
IVski WAF | Sensitive file probe detected - looking for .env
Hacking Brute-Force Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇹🇷 oalver
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-10-19. Risk score: 30/100.
Brute-Force IoT Targeted
🇦🇹 begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/23
Port Scan
🇩🇪 ValtonTahiri
Port Scan
🇩🇪 banankicks
Unauthorized connection attempt detected from IP address 148.3.16.76 to port 23 (banankicks-server) [j]
Brute-Force Exploited Host
🇺🇸 RAP
2026-10-19 03:00:17 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 johuang92
Cowrie SSH honeypot: session 1a7a798f1c62
SSH
🇩🇪 sojan
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=23 DPT=23
Port Scan
🇫🇷 uthul
T-Pot honeypot: 3 hits on ports [23] (automated)
Port Scan Brute-Force SSH
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=30821 dstport=23
Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 23/tcp
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 111.238.174.6
🇷🇴 80.94.92.55
🇬🇧 46.101.37.8
🇧🇪 35.210.230.229
🇧🇪 35.210.167.237
🇸🇪 31.208.252.51
🇺🇸 205.210.31.86
🇿🇦 196.41.207.112
🇺🇾 190.133.104.243
🇨🇴 181.62.2.57
🇪🇸 135.136.61.54
🇮🇳 122.170.99.195
🇵🇭 112.208.187.93
🇹🇭 49.229.173.172
🇷🇴 2.57.121.112
🇺🇸 216.25.90.92
🇺🇦 176.105.197.156
🇩🇪 167.94.146.58
🇺🇸 147.185.132.134
🇧🇩 103.248.205.89
feedback