189.85.112.248
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- WEBNET Telecom
- Usage Type
- Fixed Line ISP
- ASN
- AS270540
- Domain Name
- webnettelecom.com.br
- Country
- 🇧🇷 Brazil
- City
- Araras, Sao Paulo
Abuse Reports
Total reports
24 from
20 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 3 application-level events across 3 source port(s). Sensor(s): Cowrie.
|
Port Scan | |
| 🇮🇩 Indobsd |
|
Port Scan Web App Attack SSH | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ip
|
Port Scan | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 43 | Len: 60B | Win: 65535(1) | rDNS: 189.85.112-248.dynamic.webnettelecom.com.br | F2B/ufw-honeypot@2026-10-03T01:20:44Z
|
Port Scan Hacking | |
| 🇫🇷 GabrielJST |
(sshd) Failed SSH login from 189.85.112.248 (BR/Brazil/189.85.112-248.dynamic.webnettelecom.com.br)
|
Brute-Force SSH | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to SSH port 22
|
Port Scan Hacking SSH | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇺🇸 RAP |
2026-10-01 19:18:28 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 189.85.112.248
|
Port Scan Brute-Force SSH | |
| 🇺🇸 RAP |
2026-09-30 17:01:08 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇩🇪 LoakyDE |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=22,23
|
Port Scan Hacking | |
| 🇷🇺 Reaper |
SSH abuse or brute-force attack from 189.85.112.248
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown