JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.112.145.125

189.112.145.125

Neutral Activity

48 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

ALGAR TELECOM S/A

Usage Type

Fixed Line ISP

ASN

AS16735

Hostname(s)

189-112-145-125.static.ctbctelecom.com.br

Domain Name

algar.com.br

Country

🇧🇷 Brazil

City

Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

189.112.145.125 has been reported 48 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 189.112.145.125:

This IP address has been reported a total of 48 times from 20 distinct sources. 189.112.145.125 was first reported on July 29th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 thaizone.com	2024-09-14 17:12:32 (2 years ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
Anonymous	2024-09-05 21:30:56 (2 years ago)	(imapd) Failed IMAP login from 189.112.145.125 (BR/Brazil/Rio Grande do Sul/Porto Alegre/189-112-145 ... show more (imapd) Failed IMAP login from 189.112.145.125 (BR/Brazil/Rio Grande do Sul/Porto Alegre/189-112-145-125.static.ctbctelecom.com.br/[redacted]) show less	Brute-Force
Anonymous	2024-08-18 20:04:09 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇲🇾 syokadmin	2024-08-03 03:36:25 (2 years ago)	189.112.145.125 (BR/Brazil/189-112-145-125.static.ctbctelecom.com.br), 2 distributed smtpauth attack ... show more 189.112.145.125 (BR/Brazil/189-112-145-125.static.ctbctelecom.com.br), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
Anonymous	2024-07-24 02:11:55 (2 years ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-07-23 06:48:06 (2 years ago)	Ports: 25,2525,465,587,2525; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇲🇾 syokadmin	2024-07-19 12:12:07 (2 years ago)	189.112.145.125 (BR/Brazil/189-112-145-125.static.ctbctelecom.com.br), 5 distributed SMTP Logins on ... show more 189.112.145.125 (BR/Brazil/189-112-145-125.static.ctbctelecom.com.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇨🇿 lp	2024-07-15 01:52:16 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 189.112.145.125 2024-07-15T00:53:01+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 189.112.145.125 2024-07-15T00:53:01+02:00 vpn Access-Reject 'administrator' station: 189.112.145.125 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-07-13 10:52:20 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 189.112.145.125 2024-07-13T11:08:04+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 189.112.145.125 2024-07-13T11:08:04+02:00 vpn Access-Reject 'administrator' station: 189.112.145.125 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-03 21:16:32 (2 years ago)	(mod_security) mod_security (id:217291) triggered by 189.112.145.125 (189-112-145-125.static.ctbctel ... show more (mod_security) mod_security (id:217291) triggered by 189.112.145.125 (189-112-145-125.static.ctbctelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 03 17:16:27.443463 2024] [security2:error] [pid 5522] [client 189.112.145.125:60656] [client 189.112.145.125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|furballrecords.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "furballrecords.com"] [uri "/g12contactnolog.php"] [unique_id "ZoW_qxLGlY107IOdAFKEbAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NxtGenIT	2024-06-20 01:40:06 (2 years ago)	189.112.145.125 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Att ... show more 189.112.145.125 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇩🇪 NxtGenIT	2024-06-16 21:11:18 (2 years ago)	189.112.145.125 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Att ... show more 189.112.145.125 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇩🇪 NxtGenIT	2024-06-11 12:22:26 (2 years ago)	189.112.145.125 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Att ... show more 189.112.145.125 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇪🇸 10dencehispahard SL	2024-06-03 14:00:02 (2 years ago)	Unauthorized login attempts [ spamlogs]	Brute-Force
🇨🇿 lp	2024-06-01 22:52:37 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 189.112.145.125 2024-06-01T22:28:08+0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 189.112.145.125 2024-06-01T22:28:08+02:00 vpn Access-Reject 'ple' station: 189.112.145.125 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.40.244

🇩🇪 130.12.180.194

🇳🇱 94.154.43.74

🇬🇧 86.2.38.131

🇨🇱 64.137.37.35

🇺🇸 50.188.204.213

🇹🇼 35.221.129.45

🇰🇷 14.206.0.20

🇰🇷 221.138.36.228

🇺🇸 162.216.149.19

🇺🇸 100.29.192.51

🇨🇦 85.217.149.45

🇺🇸 45.156.129.70

🇰🇷 43.164.128.28

🇧🇪 35.240.58.49

🇮🇳 34.93.40.82

🇺🇾 186.49.123.114

🇪🇨 186.46.129.76

🇺🇸 185.180.141.107

🇩🇪 167.94.145.18