189.123.99.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Claro NXT Telecomunicacoes Ltda
- Usage Type
- Fixed Line ISP
- ASN
- AS28573
- Domain Name
- claro.com.br
- Country
- 🇧🇷 Brazil
- City
- Ribeirao Preto, Sao Paulo
Abuse Reports
Total reports
23 from
20 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 throny |
Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-14 14:56 UTC, API call GetAccount, client silentvs-hitworker/1
|
Hacking Web App Attack | |
| 🇩🇪 LRob |
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 RAP |
2026-11-13 11:05:50 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇮 6kilowatti |
|
Web App Attack | |
| 🇫🇮 inlink.ltd |
Known malicious PHP file or CMS probe
|
Web App Attack | |
| 🇩🇪 EGP Abuse Dept |
Scanning for web/db/file exploits on www.ladingzeker.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇨🇿 Countryman |
repeated unauthorized VPN login attempt, user sweep
|
VPN IP Hacking Brute-Force | |
| 🇺🇸 lostswordfish.com |
Wordfence waf block on registrymatters
|
Web App Attack | |
| 🇺🇸 Phil Schuyler |
Connection probe against a public honeypot service: 1 observed event targeting exposed network services.
|
Port Scan | |
| 🇺🇸 ShadowWhisperer |
TELNET credential attempt.
|
Brute-Force IoT Targeted | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| Anonymous |
|
Hacking Bad Web Bot Web App Attack | |
| 🇺🇸 RAP |
2026-08-20 20:26:51 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=2629 dstport=23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown