JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

189.46.231.235

Neutral Activity

Abuse Confidence Score

0% Low Risk

230 reports

133 reporters · latest 7 months ago

ISP: TELEFÔNICA BRASIL S.A
Usage Type: Fixed Line ISP
ASN: AS27699
Domain Name: telefonica.com.br
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

189.46.231.235 has been reported 230 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

230 from 133 distinct reporters

First reported

July 16th 2025

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-07 00:08:09 UTC · (7 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇰🇷 i553041	2026-03-02 01:53:44 UTC · (8 months ago)	SSH brute force attack: multiple invalid user attempts.	Brute-Force SSH
🇩🇪 sh97	2026-02-19 00:22:39 UTC · (8 months ago)	Auto-Install-Ubuntu-Server-24: SSH Brute Force from 189.46.231.235 at 2026-02-19 05:52:38 IST	Brute-Force SSH
🇩🇪 sh97	2026-02-18 01:30:41 UTC · (8 months ago)	Auto-Install-Ubuntu-Server-24: SSH Brute Force from 189.46.231.235 at 2026-02-18 07:00:41 IST	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-02-10 23:39:03 UTC · (8 months ago)		Brute-Force Web App Attack
🇳🇱 JCB	2026-02-10 13:17:00 UTC · (9 months ago)		SSH
🇺🇸 Tom Cumberfield	2026-02-10 10:21:34 UTC · (9 months ago)	SSH brute-force attempt blocked by Fail2Ban.	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-02-09 23:38:35 UTC · (9 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-02-09 22:54:55 UTC · (9 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/189.46.231.235	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-09 20:11:28 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 shimizu	2026-02-09 15:01:01 UTC · (9 months ago)	4 times SMTP brute-force	Hacking Brute-Force
🇺🇸 bigscoots.com	2026-02-09 10:17:30 UTC · (9 months ago)	189.46.231.235 (BR/Brazil/189-46-231-235.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 9 03:24:00 15501 sshd[15226]: pam_unix(sshd:auth): authenticat ... show more 189.46.231.235 (BR/Brazil/189-46-231-235.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 9 03:24:00 15501 sshd[15226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.46.231.235 user=root Feb 9 03:24:02 15501 sshd[15226]: Failed password for root from 189.46.231.235 port 49962 ssh2 Feb 9 04:14:58 15501 sshd[19197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.43.61.182 user=root Feb 9 04:15:01 15501 sshd[19197]: Failed password for root from 151.43.61.182 port 5946 ssh2 Feb 9 04:17:16 15501 sshd[19411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.43.61.182 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇬🇧 Steve	2026-02-09 08:22:24 UTC · (9 months ago)	SSH invalid-user multiple login attempts	Brute-Force SSH
Anonymous	2026-02-09 07:57:46 UTC · (9 months ago)	sshd	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-09 07:44:49 UTC · (9 months ago)	189.46.231.235 (BR/Brazil/189-46-231-235.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 9 01:44:37 13992 sshd[23963]: pam_unix(sshd:auth): authenticat ... show more 189.46.231.235 (BR/Brazil/189-46-231-235.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 9 01:44:37 13992 sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=44.193.213.238 user=root Feb 9 01:03:01 13992 sshd[20945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.46.231.235 user=root Feb 9 01:03:03 13992 sshd[20945]: Failed password for root from 189.46.231.235 port 48508 ssh2 Feb 9 01:09:49 13992 sshd[21448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.46.231.235 user=root Feb 9 01:09:51 13992 sshd[21448]: Failed password for root from 189.46.231.235 port 48208 ssh2 IP Addresses Blocked: 44.193.213.238 (US/United States/ec2-44-193-213-238.compute-1.amazonaws.com) show less	Brute-Force SSH

Showing 1 to 15 of 230 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 2407:3640:2297:206::1

🇸🇬 2402:1f00:8000:800::3f2a

🇺🇸 158.51.100.106

🇩🇪 157.230.18.166

🇻🇳 117.6.44.221

🇵🇱 2400:cb00:923:1000:e311:b511:f28:32ef

🇨🇳 223.247.153.211

🇿🇦 197.94.215.251

🇺🇸 147.185.132.96

🇰🇷 121.143.66.83

🇺🇦 94.45.39.197

🇷🇺 93.190.110.226

🇷🇴 92.118.39.71

🇷🇴 92.118.39.64

🇬🇧 2a06:4884:3000::2c

🇦🇺 2400:6180:10:200::f6df:b000

🇦🇺 2400:6180:10:200::f6a8:4000

🇷🇺 217.12.98.49

🇪🇸 188.26.196.201

🇮🇳 128.185.12.179