JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.255.115.77

191.255.115.77 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS27699
Hostname(s)	191-255-115-77.dsl.telesp.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.255.115.77

Whois 191.255.115.77

IP Abuse Reports for 191.255.115.77:

This IP address has been reported a total of 37 times from 16 distinct sources. 191.255.115.77 was first reported on December 19th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 btimon	2026-01-04 14:23:00 (6 months ago)	HTTP.URI.SQL.Injection	SQL Injection
🇧🇷 csirtsatc	2025-12-22 11:02:00 (6 months ago)	HTTP.URI.SQL.Injection	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-22 08:16:29 (6 months ago)	22/Dec/2025:09:16:29.708529 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Dec/2025:09:16:29.708529 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/Libros hack/0xword/0XWORD UNA AL DIA.pdf:galeria/futurista blusa.asp"] [unique_id "aUj-Xf-0W_b8EaVOSJNM2gAABlE"] ... show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-12-22 06:30:00 (6 months ago)	22/Dec/2025:07:29:59.996328 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Dec/2025:07:29:59.996328 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/Libros hack/0xword/0XWORD UNA AL DIA.pdf:galeria/blusa dry.asp"] [unique_id "aUjlZ_-0W_b8EaVOSJMMFAAABmw"] ... show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-12-22 04:54:52 (6 months ago)	22/Dec/2025:05:54:52.506346 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Dec/2025:05:54:52.506346 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/PenTesting/GUIA DE PRUEBAS OWASP.pdf:*/confirmado sistema.asp"] [unique_id "aUjPHH7mg38T6oOE0s6jeAAABhY"] ... show less	Hacking Web App Attack
Anonymous	2025-12-22 04:31:00 (6 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇹🇷 CTI-Beholder	2025-12-22 03:52:00 (6 months ago)	hacking	SQL Injection
🇫🇷 conseilgouz	2025-12-22 03:24:01 (6 months ago)	upe-12 : Block return, carriage return, ... characters=>/demo/action-image-gallery:galeria/n%C3%A9ce ... show more upe-12 : Block return, carriage return, ... characters=>/demo/action-image-gallery:galeria/n%C3%A9cessaire.html?id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%...(>) show less	Hacking
🇪🇸 el-brujo	2025-12-22 02:24:14 (6 months ago)	22/Dec/2025:03:24:14.264554 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Dec/2025:03:24:14.264554 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/Lenguajes de Programacion/Diseno Y Programacion (Html, Php, Asp, Javascript, Xml, Sql)2.pdf:galeria/usado revisado.asp"] [unique_id "aUirzvdrgz2J-92Jpv6pUgAAAvY"] ... show less	Hacking Web App Attack
🇵🇹 Information Security	2025-12-22 00:32:44 (6 months ago)	Web App Attack	Web App Attack
🇪🇸 el-brujo	2025-12-22 00:19:31 (6 months ago)	22/Dec/2025:01:19:30.934570 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Dec/2025:01:19:30.934570 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/Libros hack/0xword/0XWORD UNA AL DIA.pdf:galeria/replica rapido.asp"] [unique_id "aUiOkm9iEQAxK3ZjxZ1Z7QAAAUI"] ... show less	Hacking Web App Attack
🇫🇮 tjs	2025-12-21 22:55:00 (6 months ago)	web attack, SQL injection attempt	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-21 20:34:32 (6 months ago)	21/Dec/2025:21:34:31.670681 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 21/Dec/2025:21:34:31.670681 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/Hacking y Seguridad informatica/Hacking_the_Hacker.pdf:galeria/geek bon\\\\xc3\\\\xa9.aspx"] [unique_id "aUhZ1_ensMvRRF1A-wn7XgAAAIo"] ... show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-12-21 18:34:02 (6 months ago)	21/Dec/2025:19:34:02.102253 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 21/Dec/2025:19:34:02.102253 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 191.255.115.77] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'son),' [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within ARGS:id: 'nvOpzp; AND 1=1 OR (<'\\\\x22>iKO)),"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "elhacker.info"] [uri "/manuales/Libros hack/0xword/0XWORD UNA AL DIA.pdf:galeria/bege camiseta.asp"] [unique_id "aUg9mkwDoFNP92dwB5OKQgAAAAY"] ... show less	Hacking Web App Attack
🇫🇷 masterguru	2025-12-21 17:47:08 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 191.255.115.77 (BR/Brazil/191-255-115-77.dsl.t ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 191.255.115.77 (BR/Brazil/191-255-115-77.dsl.telesp.net.br): 1 in the last 3600 secs (0-197) show less	Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 206.189.44.172

🇧🇷 205.210.31.192

🇦🇴 193.163.125.183

🇵🇱 176.53.159.197

🇫🇷 92.222.108.100

🇺🇸 74.125.76.27

🇩🇪 47.254.148.219

🇧🇷 45.190.118.247

🇮🇷 31.7.71.195

🇳🇱 185.242.226.59

🇫🇷 185.177.72.54

🇺🇸 147.185.132.50

🇳🇱 91.92.42.7

🇵🇹 81.193.216.17

🇮🇩 69.5.0.120

🇺🇸 66.132.186.232

🇺🇸 52.23.26.158

🇺🇸 45.156.129.176

🇧🇪 34.62.145.71

🇨🇳 1.196.187.124