JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

186.212.145.36

Recent Activity

Abuse Confidence Score

4% Caution

3 reports

3 reporters · latest 6 days ago

ISP: TELEFÔNICA BRASIL S.A
Usage Type: Fixed Line ISP
ASN: AS18881
Hostname(s): 186.212.145.36.static.host.gvt.net.br
Domain Name: telefonica.com.br
Country: 🇧🇷 Brazil
City: Curitiba, Parana

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

3 from 3 distinct reporters

First reported

January 19th 2023

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Bad Web Bot 1 Web App Attack 1 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-31 08:22:38 UTC · (6 days ago)	(mod_security) mod_security (id:210350) triggered by 186.212.145.36 (186.212.145.36.static.host.gvt.net.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:22:34.301200 2026] [security2:error] [pid 2725:tid 2 ... show more (mod_security) mod_security (id:210350) triggered by 186.212.145.36 (186.212.145.36.static.host.gvt.net.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:22:34.301200 2026] [security2:error] [pid 2725:tid 2725] [client 186.212.145.36:35706] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rucomp.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rucomp.com"] [uri "/"] [unique_id "auWlStWpl3HRxlL4DQ_03wAAAAg"], referer: https://five.co.in/redirect.php?ref_host=bignickspizza.com.au show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 files.fail	2023-01-19 19:26:22 UTC · (3 years ago)	Jan 19 20:26:19 box sshd[302165]: Invalid user weblogic from 186.212.145.36 port 59644 Jan 19 20:26:21 box sshd[302165]: Failed password for invalid user weblogic from 186.212.145.36 port 59644 ssh2 ...	Brute-Force SSH
🇩🇪 SteveHH	2023-01-19 19:22:55 UTC · (3 years ago)	Jan 19 20:20:56 root-server sshd[2893394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.212.145.36 Jan 19 20:20:58 root-server sshd[2893394]: Failed password for invalid user db2inst1 from 186.212.145.3 ... show more Jan 19 20:20:56 root-server sshd[2893394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.212.145.36 Jan 19 20:20:58 root-server sshd[2893394]: Failed password for invalid user db2inst1 from 186.212.145.36 port 59895 ssh2 Jan 19 20:22:54 root-server sshd[2894029]: Invalid user abc from 186.212.145.36 port 44575 ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 209.46.126.9

🇧🇬 94.236.209.207

🇨🇦 76.67.156.2

🇧🇷 205.210.31.222

🇺🇸 173.255.206.221

🇺🇸 165.154.182.187

🇬🇧 82.132.212.166

🇳🇱 77.239.124.78

🇨🇳 36.137.242.65

🇲🇽 186.96.158.180

🇺🇸 135.119.92.26

🇵🇰 111.68.98.152

🇳🇱 109.160.32.36

🇮🇩 103.174.64.201

🇺🇸 67.147.49.27

🇷🇴 2.57.122.238

🇨🇴 190.253.15.236

🇺🇸 162.216.150.168

🇯🇵 160.251.215.51

🇺🇸 129.121.138.81