189.57.111.108

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
92% Critical
20 reports
19 reporters · latest 8 hours ago
ISP
TELEFÔNICA BRASIL S.A
Usage Type
Fixed Line ISP
ASN
AS10429
Hostname(s)
189-57-111-108.customer.tdatabrasil.net.br
Domain Name
telefonica.com.br
Country
🇧🇷 Brazil
City
Sao Paulo, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 5 🇬🇧 United Kingdom of Great Britain and Northern Ireland 4 🇺🇸 United States of America 3
Most common categories Port Scan 13 Hacking 7 Web App Attack 6 Bad Web Bot 4 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 security.rdmc.fr
VoIP Port Scan proto:UDP src:37716 dst:5060
Port Scan
🇷🇺 6o6ep
connection via ip or to a non-existent subdomain: GET / HTTP/1.0
Port Scan Bad Web Bot
🇩🇪 larse99
Detected Scanning / Hacking activity
Port Scan Hacking
🇳🇱 Roderic
*Port Scan* detected from 189.57.111.108 (BR/Brazil/São Paulo/São Paulo/189-57-111-108.customer.tdatabrasil.net.br/[redacted]).
Port Scan
🇵🇱 Kolobrzeg
Repeated protocol probing of VNC relay service port (unknown commands, silent or malformed connections), blocked after repeated attempts. Last seen 2026-11-02 08:43 UTC. Automated detection. AS10429 TELEFONICA BRASIL S.A.
Port Scan
🇬🇧 knock
Knock-Knock honeypot brute-force: HTTP (12 total hits)
Web App Attack
🇯🇵 www.winos.me
Shield: Layer4 Port 9 Trap
Port Scan Hacking
🇬🇧 knock
Knock-Knock honeypot brute-force: HTTP (8 total hits)
Web App Attack
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 8 application-level events across 2 target ports and 4 source port(s). Ports: 80/HTTP, 443/HTTPS. Sensors: H0neytr4p, Tanner.
Port Scan
Anonymous
SIEM ALERT AUTO REPORT
Email Spam
Anonymous
unsolicited connect TCP dport 443 (sport 60832)
Hacking
🇫🇷 eselpcore.com
Requests to non‑existent directory and files (404 scanning)
Web App Attack
🇫🇷 Coco Bongo
189.57.111.108 [redacted] (10429-TELEFONICA BRASIL S.A Brazil SxC3xA3o Paulo) - - [31/Oct/2026:18:34:48 +0100] "GET /api/v1/Accounts HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x ...
Bad Web Bot Web App Attack
🇫🇷 masterguru
Host header is a numeric IP address. Pattern match "(?:^( (920350-197)
Hacking Bad Web Bot
Anonymous
Repeated unauthorized connection attempts to restricted service observed.
Port Scan Hacking Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 70.164.36.43
🇧🇷 45.232.73.84
🇳🇱 193.176.31.215
🇷🇺 178.176.85.54
🇷🇪 92.130.51.148
🇺🇸 66.132.186.232
🇧🇷 45.187.121.38
🇩🇴 45.172.152.74
🇳🇱 45.148.10.141
🇬🇧 35.203.211.136
🇳🇱 213.177.179.80
🇲🇱 197.155.168.61
🇺🇿 94.158.58.84
🇳🇱 93.123.109.164
🇷🇴 92.118.39.49
🇫🇷 91.231.89.156
🇧🇬 79.124.49.70
🇳🇱 45.148.10.157
🇳🇱 45.148.10.152
🇭🇰 216.118.231.170
feedback