167.58.87.84
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Administracion Nacional de Telecomunicaciones
- Usage Type
- Fixed Line ISP
- ASN
- AS6057
- Hostname(s)
- r167-58-87-84.dialup.adsl.anteldata.net.uy
- Domain Name
- antel.com.uy
- Country
- 🇺🇾 Uruguay
- City
- Montevideo, Montevideo Department
No reports in the last 60 days
167.58.87.84 has been reported 13 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
13 from
13 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 donarev419 |
Port scan detected on port 5900 (connection without data transfer)
|
Port Scan | |
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/5900
|
Port Scan | |
| 🇨🇦 Slackin' Jack |
Triggered honeypot on port 5900. (167.58.87.84)
|
Port Scan | |
| 🇩🇪 anycast_ac |
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/5900 (vnc).
Family fingerprint: vnc-scanner
Commands captured:
$ client RFB version: RFB 003.003
$ server challenge: 7470991feeabcd3fa9a1f7323acc8a4b
|
DDoS Attack | |
| 🇩🇪 _ArminS_ |
SP-Scan 54277:5900 detected 2026.08.26 01:57:40
blocked until 2026.10.14 19:00:27
|
Port Scan | |
| 🇩🇪 XYCoderXY |
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
|
Brute-Force SSH | |
| Anonymous |
Tried our host z.
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 wristhulk |
Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist).
|
Brute-Force | |
| Anonymous |
Hit honeypot r.
|
Port Scan Hacking Exploited Host | |
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 5900 with flags: SYN
|
Port Scan | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 crnpekgoz |
[PortScan] Risk=100 ASN=6057 (portscan) Port=5900 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
|
Port Scan | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-08-02T03:18:55Z.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown