JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.11.132.172

187.11.132.172 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 2%: ?

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS27699
Hostname(s)	187-11-132-172.dsl.telesp.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.11.132.172

Whois 187.11.132.172

IP Abuse Reports for 187.11.132.172:

This IP address has been reported a total of 25 times from 16 distinct sources. 187.11.132.172 was first reported on March 5th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Threat.live	2026-06-17 21:50:06 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force
Anonymous	2026-04-25 11:09:07 (2 months ago)	Port Scanner	Port Scan
Anonymous	2026-03-29 22:36:29 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 quilla	2026-03-28 23:35:00 (3 months ago)	Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)	DDoS Attack
🇨🇳 ThreatBook.io	2026-03-26 23:59:00 (3 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/187.11.132.172 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/187.11.132.172 2026-03-26 05:30:16 /JSON%7C76561199665366075 2026-03-26 05:11:17 /JSON%7C76561199665366075 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-22 07:56:44 (4 months ago)	(mod_security) mod_security (id:218580) triggered by 187.11.132.172 (187-11-132-172.dsl.telesp.net.b ... show more (mod_security) mod_security (id:218580) triggered by 187.11.132.172 (187-11-132-172.dsl.telesp.net.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 02:56:37.038677 2026] [security2:error] [pid 10624:tid 10646] [client 187.11.132.172:35122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:iframe. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|gochemless.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "gochemless.com"] [uri "/pdf/Individual_and_Combined_Effects_of_Copper_and_Silver_Ions.pdf"] [unique_id "aZq2tawhwYUBR7Gp_xkn9AAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-14 15:56:32 (5 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2025-12-01 06:42:04 (7 months ago)	[Mon Dec 01 13:04:01.179040 2025] [security2:error] [pid 1348226:tid 139858001512128] [client 187.11 ... show more [Mon Dec 01 13:04:01.179040 2025] [security2:error] [pid 1348226:tid 139858001512128] [client 187.11.132.172:48830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/88.0.4324.96 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/4022-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-dasarian-deterministik-curah-hujan-provinsi-..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-cat ... show less	Hacking Web App Attack
🇩🇪 SMARTNET	2025-11-26 02:37:10 (7 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-25 04:44:17 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-20 14:46:48 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 nodepile	2025-11-17 11:42:02 (7 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands/infiniti-g37-sedan-2009-hea ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands/infiniti-g37-sedan-2009-headlight-covers.html ua='Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-11-10 21:02:19 (7 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/bumpers-exterior-interior-parts-ki ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/bumpers-exterior-interior-parts-kits.html ua='Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-11-06 01:09:23 (7 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/bumpers-exterior-interior-parts-ki ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/bumpers-exterior-interior-parts-kits/body-kit-accessories-all-categories.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 11_2_3) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/89.0.4389.72 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-10-30 07:54:39 (8 months ago)	Requests denied due to proxy/VPN risk	Open Proxy VPN IP

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 46.101.87.73

🇮🇪 2a05:d018:10df:d401:ab17:f536:961d:68df

🇧🇷 205.210.31.218

🇵🇱 194.180.49.219

🇧🇷 191.36.154.175

🇳🇱 185.242.226.126

🇲🇾 183.171.236.113

🇺🇸 173.239.218.124

🇺🇸 165.22.180.136

🇬🇧 159.65.58.200

🇫🇷 146.70.194.246

🇮🇪 108.130.61.254

🇺🇸 104.143.152.126

🇺🇸 104.28.201.73

🇺🇸 91.230.168.141

🇸🇬 84.75.155.248

🇸🇬 84.75.155.244

🇸🇬 84.75.155.230

🇳🇱 81.19.216.91

🇧🇬 79.124.49.226