JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

187.58.148.23

Activity Trending Down

Abuse Confidence Score

20% Elevated

49 reports

19 reporters · latest 1 month ago

ISP: TELEFÔNICA BRASIL S.A
Usage Type: Fixed Line ISP
ASN: AS18881
Domain Name: telefonica.com.br
Country: 🇧🇷 Brazil
City: Porto Alegre, Rio Grande do Sul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

49 from 19 distinct reporters

First reported

August 20th 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇫🇷 France 2 🇮🇩 Indonesia 2 🇦🇿 Azerbaijan 1

Most common categories Brute-Force 5 SSH 4 Web App Attack 3 Hacking 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-09-30 12:00:53 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 187.58.148.23. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishi ... show more Email: Login failures from Bad Reputation IP: 187.58.148.23. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-30 11:00:09 UTC · (1 month ago)	Email: Login failures from Bad Reputation IP: 187.58.148.23. Threat Score: 4.7/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
Anonymous	2026-09-24 16:46:19 UTC · (1 month ago)	2026-09-24T20:16:10.828645+03:30 digitalogic sshd-session[585334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.148.23 2026-09-24T20:16:12.913341+03:30 digitalogic sshd-session[585334]: Failed passwor ... show more 2026-09-24T20:16:10.828645+03:30 digitalogic sshd-session[585334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.148.23 2026-09-24T20:16:12.913341+03:30 digitalogic sshd-session[585334]: Failed password for invalid user admin from 187.58.148.23 port 53848 ssh2 2026-09-24T20:16:14.726186+03:30 digitalogic sshd-session[585334]: Connection closed by invalid user admin 187.58.148.23 port 53848 [preauth] ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-09-21 00:50:12 UTC · (1 month ago)	Threat.live: Brute Force	Brute-Force
Anonymous	2026-09-20 19:05:56 UTC · (1 month ago)	187.58.148.23 - - [20/Sep/2026:21:05:50 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" ...	Web App Attack
🇩🇪 formality	2026-09-18 15:01:23 UTC · (1 month ago)	Invalid user admin from 187.58.148.23 port 37620	Brute-Force SSH
🇺🇸 qtland	2026-09-17 23:51:47 UTC · (1 month ago)	2026-09-17T23:51:44.553194+00:00 relay-lax sshd[2671664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.148.23 2026-09-17T23:51:46.104817+00:00 relay-lax sshd[2671664]: Failed password for invalid user ... show more 2026-09-17T23:51:44.553194+00:00 relay-lax sshd[2671664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.58.148.23 2026-09-17T23:51:46.104817+00:00 relay-lax sshd[2671664]: Failed password for invalid user user from 187.58.148.23 port 46927 ssh2 2026-09-17T23:51:46.761069+00:00 relay-lax sshd[2671664]: Connection closed by invalid user user 187.58.148.23 port 46927 [preauth] ... show less	Brute-Force SSH
🇫🇷 weHateBots	2026-09-17 23:09:21 UTC · (1 month ago)	Sep 18 01:09:17 zulu1924 sshd[1091648]: Invalid user user from 187.58.148.23 port 40038 Sep 18 01:09:20 zulu1924 sshd[1091648]: Failed password for invalid user user from 187.58.148.23 port 40038 ssh2	Brute-Force SSH
🇨🇦 DRI	2026-08-25 04:21:36 UTC · (2 months ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇭 backslash	2026-07-25 21:48:00 UTC · (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-07-15 16:36:09 UTC · (3 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 MusicLibrary	2026-05-10 15:26:12 UTC · (6 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-01-31 09:10:09 UTC · (9 months ago)	VPN Abuse brute force	Hacking
Anonymous	2026-01-30 21:30:20 UTC · (9 months ago)		Hacking
🇨🇿 lp	2026-01-06 14:51:21 UTC · (10 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 187.58.148.23 2026-01-06T15:30:05+01:00 vpn Access-Reject 'barbora' station: 187.58.148.23 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 187.58.148.23 2026-01-06T15:30:05+01:00 vpn Access-Reject 'barbora' station: 187.58.148.23 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 104.22.64.38

🇮🇩 103.165.208.145

🇩🇪 69.5.169.201

🇿🇦 41.13.96.177

🇷🇺 31.130.137.53

🇺🇸 2604:a880:400:d1:0:4:dee7:5001

🇺🇸 216.180.246.173

🇸🇪 194.103.139.33

🇬🇧 185.157.232.100

🇩🇪 165.245.252.127

🇰🇷 144.24.73.255

🇦🇹 91.112.75.91

🇺🇸 72.63.157.104

🇺🇸 70.184.183.12

🇺🇸 50.17.177.211

🇺🇸 45.61.145.195

🇯🇵 34.97.34.212

🇸🇬 8.219.1.152

🇧🇷 189.114.136.231

🇧🇷 187.51.84.86