JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.248.48.113

152.248.48.113 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 43%: ?

43%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS26599
Hostname(s)	152-248-48-113.user.vivozap.com.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Recife, Pernambuco

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.248.48.113

Whois 152.248.48.113

IP Abuse Reports for 152.248.48.113:

This IP address has been reported a total of 10 times from 6 distinct sources. 152.248.48.113 was first reported on June 22nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-26 02:07:20 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com ... show more (mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:07:16.590864 2026] [security2:error] [pid 6712:tid 6712] [client 152.248.48.113:61572] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 152.248.48.113 (+1 hits since last alert)\|wwfstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "aj3e1Hoj5HP_M0OdXddIhAAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 22:10:16 (5 hours ago)	(mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com ... show more (mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 18:10:08.641010 2026] [security2:error] [pid 29570:tid 29570] [client 152.248.48.113:57050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 152.248.48.113 (+1 hits since last alert)\|serranoscoffee.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "serranoscoffee.com"] [uri "/xmlrpc.php"] [unique_id "aj2nQJPfVtzsjVtCo5eEywAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-25 15:02:49 (12 hours ago)	(wordpress) Failed wordpress login from 152.248.48.113 (BR/Brazil/152-248-48-113.user.vivozap.com.br ... show more (wordpress) Failed wordpress login from 152.248.48.113 (BR/Brazil/152-248-48-113.user.vivozap.com.br) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-25 01:14:31 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com ... show more (mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 21:14:23.825070 2026] [security2:error] [pid 26212:tid 26212] [client 152.248.48.113:63534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 152.248.48.113 (+1 hits since last alert)\|knoxbestos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "knoxbestos.com"] [uri "/xmlrpc.php"] [unique_id "ajyA73PIlAnbixsI1UIpaQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-24 18:08:47 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 15:05:40 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com ... show more (mod_security) mod_security (id:240335) triggered by 152.248.48.113 (152-248-48-113.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 11:05:33.057197 2026] [security2:error] [pid 23030:tid 23030] [client 152.248.48.113:55459] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 152.248.48.113 (+1 hits since last alert)\|americanureport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "americanureport.com"] [uri "/xmlrpc.php"] [unique_id "ajvyPdrOMPZzhWG7ULLk7AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-06-24 07:54:19 (1 day ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
🇫🇷 applemooz	2026-06-24 04:36:01 (1 day ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇨🇦 polycoda	2026-06-22 16:32:52 (3 days ago)	🔥 VERY AGGRESSIVE SCANNER probed over 100 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
🇨🇦 polycoda	2026-06-22 15:15:52 (3 days ago)	AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 212.192.240.126

🇺🇸 195.184.76.183

🇫🇷 90.63.199.41

🇺🇸 20.168.122.17

🇺🇸 172.237.155.29

🇺🇸 162.216.150.178

🇺🇸 162.216.149.58

🇨🇳 117.34.85.168

🇨🇳 115.56.238.174

🇩🇪 77.22.211.47

🇩🇪 69.5.169.115

🇺🇸 43.166.136.202

🇵🇰 39.61.45.3

🇨🇳 36.135.73.96

🇵🇰 223.123.38.127

🇩🇪 161.35.65.86

🇫🇮 147.185.133.191

🇫🇮 147.185.133.71

🇮🇳 98.70.50.166

🇷🇴 82.152.132.24