JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.185.130.162

Neutral Activity

Abuse Confidence Score

0% Low Risk

39 reports

34 reporters · latest 2 months ago

ISP: Claro NXT Telecomunicacoes Ltda
Usage Type: Fixed Line ISP
ASN: AS28573
Hostname(s): bfb982a2.virtua.com.br
Domain Name: claro.com.br
Country: 🇧🇷 Brazil
City: Belo Horizonte, Minas Gerais

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.185.130.162 has been reported 39 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

39 from 34 distinct reporters

First reported

August 12th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-09-04 01:08:00 UTC · (2 months ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇨🇦 polycoda	2026-08-31 12:44:16 UTC · (2 months ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇰🇷 hanb.jp	2026-08-18 03:19:23 UTC · (2 months ago)	Aug 18 03:18:37 v4bgp sshd[1252670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 Aug 18 03:18:38 v4bgp sshd[1252670]: Failed password for invalid user admin from 191.185.130.162 port 59832 ... show more Aug 18 03:18:37 v4bgp sshd[1252670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 Aug 18 03:18:38 v4bgp sshd[1252670]: Failed password for invalid user admin from 191.185.130.162 port 59832 ssh2 Aug 18 03:19:22 v4bgp sshd[1252691]: Invalid user orangepi from 191.185.130.162 port 35222 ... show less	Brute-Force SSH
🇫🇷 kayzo	2026-08-18 03:07:53 UTC · (2 months ago)	2026-08-18T05:07:10.159760+02:00 DEDICATED-SH01 sshd-session[3732548]: Failed password for invalid user admin from 191.185.130.162 port 38698 ssh2 2026-08-18T05:07:50.744102+02:00 DEDICATED-SH01 sshd-session[3733118]: Invalid user orangepi from 191.1 ... show more 2026-08-18T05:07:10.159760+02:00 DEDICATED-SH01 sshd-session[3732548]: Failed password for invalid user admin from 191.185.130.162 port 38698 ssh2 2026-08-18T05:07:50.744102+02:00 DEDICATED-SH01 sshd-session[3733118]: Invalid user orangepi from 191.185.130.162 port 55722 2026-08-18T05:07:50.747857+02:00 DEDICATED-SH01 sshd-session[3733118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 2026-08-18T05:07:52.471431+02:00 DEDICATED-SH01 sshd-session[3733118]: Failed password for invalid user orangepi from 191.185.130.162 port 55722 ssh2 ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-08-13 14:20:01 UTC · (2 months ago)	Blocked by UFW (TCP on 2375) Source port: 49342 TTL: 52 Packet length: 44 TOS: 0x00 This report (for 191.185.130.162) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇷🇴 sh97	2026-08-13 12:51:09 UTC · (2 months ago)	2026-08-13T12:45:26.841579+00:00 ro1-hostc-storage sshd[2515271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 2026-08-13T12:45:28.913637+00:00 ro1-hostc-storage sshd[2515271]: Failed passwor ... show more 2026-08-13T12:45:26.841579+00:00 ro1-hostc-storage sshd[2515271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 2026-08-13T12:45:28.913637+00:00 ro1-hostc-storage sshd[2515271]: Failed password for invalid user admin from 191.185.130.162 port 35384 ssh2 2026-08-13T12:51:08.694492+00:00 ro1-hostc-storage sshd[2590428]: Invalid user orangepi from 191.185.130.162 port 39986 ... show less	Brute-Force SSH
🇫🇮 tjs	2026-08-13 12:25:00 UTC · (2 months ago)	web attack, shell attempt	Hacking Web App Attack
🇺🇸 HamSammich	2026-08-13 12:18:03 UTC · (2 months ago)	Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-08-13T12:18Z).	Brute-Force Web App Attack
🇺🇸 MPL	2026-08-13 11:59:44 UTC · (2 months ago)	tcp/80 (2 or more attempts)	Port Scan
🇬🇧 paradoxnetworks	2026-08-13 11:49:37 UTC · (2 months ago)	2026-08-13T11:38:43.697887+00:00 waf-lhr sshd-session[746246]: Invalid user pi from 191.185.130.162 port 34052 2026-08-13T11:44:01.249104+00:00 waf-lhr sshd-session[746915]: Invalid user httpadmin from 191.185.130.162 port 59182 2026-08-13T11:49:36.5 ... show more 2026-08-13T11:38:43.697887+00:00 waf-lhr sshd-session[746246]: Invalid user pi from 191.185.130.162 port 34052 2026-08-13T11:44:01.249104+00:00 waf-lhr sshd-session[746915]: Invalid user httpadmin from 191.185.130.162 port 59182 2026-08-13T11:49:36.581251+00:00 waf-lhr sshd-session[747650]: Invalid user admin from 191.185.130.162 port 57546 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-08-13 10:02:15 UTC · (2 months ago)	2026-08-13T03:57:05.594703-06:00 b146-35 sshd[65464]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 user=admin 2026-08-13T03:57:07.638776-06:00 b146-35 sshd[65464]: Failed password for invalid ... show more 2026-08-13T03:57:05.594703-06:00 b146-35 sshd[65464]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.185.130.162 user=admin 2026-08-13T03:57:07.638776-06:00 b146-35 sshd[65464]: Failed password for invalid user admin from 191.185.130.162 port 53862 ssh2 2026-08-13T04:02:15.122341-06:00 b146-35 sshd[65490]: Invalid user orangepi from 191.185.130.162 port 39310 ... show less	Brute-Force SSH
🇨🇦 polycoda	2026-08-13 10:00:01 UTC · (2 months ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇮🇹 alph44	2026-08-13 08:40:23 UTC · (2 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇫🇷 masterguru	2026-08-13 06:44:03 UTC · (2 months ago)	COMODO WAF: PHP Injection Attack: I/O Stream Found. Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. (218420-143)	Hacking
🇬🇧 paradoxnetworks	2026-08-13 06:14:58 UTC · (2 months ago)	2026-08-13T06:03:59.064522+00:00 waf-lhr sshd-session[701733]: Invalid user admin from 191.185.130.162 port 45528 2026-08-13T06:09:33.962636+00:00 waf-lhr sshd-session[702470]: Invalid user alan from 191.185.130.162 port 53540 2026-08-13T06:14:57.108 ... show more 2026-08-13T06:03:59.064522+00:00 waf-lhr sshd-session[701733]: Invalid user admin from 191.185.130.162 port 45528 2026-08-13T06:09:33.962636+00:00 waf-lhr sshd-session[702470]: Invalid user alan from 191.185.130.162 port 53540 2026-08-13T06:14:57.108917+00:00 waf-lhr sshd-session[703152]: Invalid user admin from 191.185.130.162 port 37182 ... show less	Brute-Force SSH

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 129.212.230.39

🇭🇰 46.247.61.208

🇬🇧 194.50.235.142

🇸🇪 146.247.242.84

🇨🇳 125.44.129.107

🇺🇸 91.230.168.143

🇫🇷 90.5.47.125

🇸🇬 43.160.244.58

🇧🇪 35.210.202.130

🇸🇦 178.87.151.173

🇺🇸 172.212.203.138

🇫🇷 169.58.194.20

🇲🇾 161.142.203.164

🇳🇱 45.148.10.152

🇩🇪 43.228.157.49

🇳🇱 193.47.62.69

🇪🇸 172.68.134.16

🇪🇸 162.158.123.124

🇺🇸 100.50.17.159

🇫🇷 92.92.172.159