189.48.255.108

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
69 reports
33 reporters · latest 11 months ago

189.48.255.108 is on our whitelist as Google non-cloud IPs via the subnet 189.48.0.0/16.

ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Domain Name
google.com
Country
🇧🇷 Brazil
City
Rio de Janeiro, Rio de Janeiro
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

189.48.255.108 has been reported 69 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
69 from 33 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 189.48.255.108 (BR/Brazil/-): 1 in the last 3600 secs
Web App Attack
🇩🇪 ger-stg-sifi1
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪 ger-stg-sifi1
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇲🇹 Malta
189.48.255.108 - - [09/Dec/2025:02:27:56 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.0.0 Safari/537.36"
Hacking Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇧🇾 lns.bz
Banned for trying to access xmlrpc [BY]
Web App Attack
🇫🇮 YF
xmlrpc.php (Potential DDoS or brute force)
Brute-Force Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪 grassau.com
(wordpress) Failed wordpress login from 189.48.255.108 (BR/Brazil/-)
Brute-Force
🇫🇷 Little Iguana
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇷🇺 DZBOT
Website Scanning / Scraping
Bad Web Bot Exploited Host Web App Attack
🇺🇸 octageeks.com
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 181.192.64.78
🇭🇰 154.221.25.205
🇰🇿 95.57.196.139
🇧🇷 187.19.135.192
🇨🇦 184.71.147.154
🇩🇪 151.243.11.180
🇷🇴 80.94.95.116
🇺🇸 35.86.247.128
🇷🇴 2.57.121.112
🇨🇱 190.5.36.147
🇧🇷 186.201.240.42
🇺🇦 176.111.51.253
🇺🇸 162.216.150.185
🇺🇸 142.93.82.226
🇮🇳 106.215.155.86
🇿🇦 102.206.92.219
🇺🇸 71.6.134.228
🇻🇳 45.119.81.245
🇧🇷 45.70.166.125
🇬🇧 35.203.210.152
feedback