JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.187.97.159

Neutral Activity

Abuse Confidence Score

0% Low Risk

122 reports

86 reporters · latest 3 years ago

ISP: Claro NXT Telecomunicacoes Ltda
Usage Type: Fixed Line ISP
ASN: AS28573
Domain Name: claro.com.br
Country: 🇧🇷 Brazil
City: Marilia, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.187.97.159 has been reported 122 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

122 from 86 distinct reporters

First reported

August 17th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-10-17 06:06:23 UTC · (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/191.187.97.159 2023-10-16 21:42:02 ["./oinasf; dd if=/proc/self/exe bs=22 count=1 \|\| while read i; do echo $i; done < /proc/self/exe \|\| cat /proc/self/exe;"]	SSH
🇺🇸 SuperCores Hosting	2023-10-16 23:51:07 UTC · (3 years ago)	[2023-10-16 23:51:07.018521] SSH/22 Unautorized connection. Suspicious SSH Brute-force.	Port Scan Hacking Brute-Force Exploited Host SSH
🇩🇪 ps-center	2023-10-16 19:56:44 UTC · (3 years ago)	SS5-W: TCP-Scanner. Port: 22	Port Scan
🇧🇪 unixserver.be	2023-10-16 18:53:06 UTC · (3 years ago)	Blacklistd SSH:22	Brute-Force SSH
🇵🇱 strefapi_com	2023-10-16 17:56:43 UTC · (3 years ago)	Oct 16 17:56:31 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 Oct 16 17:56:36 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 Oct 16 17:56:38 mail sshd[99802]: Failed password for root f ... show more Oct 16 17:56:31 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 Oct 16 17:56:36 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 Oct 16 17:56:38 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 Oct 16 17:56:40 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 Oct 16 17:56:43 mail sshd[99802]: Failed password for root from 191.187.97.159 port 42198 ssh2 ... show less	Brute-Force SSH
🇮🇩 Alva Wong	2023-10-16 12:38:46 UTC · (3 years ago)	Oct 16 19:38:25 pve sshd[777150]: Connection closed by 191.187.97.159 port 41472 [preauth] Oct 16 19:38:34 pve sshd[777196]: Invalid user usr from 191.187.97.159 port 41512 Oct 16 19:38:37 pve sshd[777196]: Connection closed by invalid user usr 191.1 ... show more Oct 16 19:38:25 pve sshd[777150]: Connection closed by 191.187.97.159 port 41472 [preauth] Oct 16 19:38:34 pve sshd[777196]: Invalid user usr from 191.187.97.159 port 41512 Oct 16 19:38:37 pve sshd[777196]: Connection closed by invalid user usr 191.187.97.159 port 41512 [preauth] Oct 16 19:38:40 pve sshd[777256]: Invalid user ONTUSER from 191.187.97.159 port 41898 Oct 16 19:38:40 pve sshd[777256]: Connection closed by invalid user ONTUSER 191.187.97.159 port 41898 [preauth] ... show less	Brute-Force SSH
🇪🇪 Unwasted	2023-10-16 12:21:25 UTC · (3 years ago)	Abusive ssh login attempt	Hacking Brute-Force SSH
🇺🇸 mauromaggioni.duckdns.org	2023-10-16 08:31:34 UTC · (3 years ago)	2023-10-16T04:31:28.783703prismaanalytics.duckdns.org sshd[10987]: Failed password for root from 191.187.97.159 port 39606 ssh2 2023-10-16T04:31:31.371367prismaanalytics.duckdns.org sshd[10987]: Failed password for root from 191.187.97.159 port 39606 ... show more 2023-10-16T04:31:28.783703prismaanalytics.duckdns.org sshd[10987]: Failed password for root from 191.187.97.159 port 39606 ssh2 2023-10-16T04:31:31.371367prismaanalytics.duckdns.org sshd[10987]: Failed password for root from 191.187.97.159 port 39606 ssh2 2023-10-16T04:31:31.777987prismaanalytics.duckdns.org sshd[10987]: Failed password for root from 191.187.97.159 port 39606 ssh2 2023-10-16T04:31:34.087381prismaanalytics.duckdns.org sshd[10987]: Failed password for root from 191.187.97.159 port 39606 ssh2 ... show less	Brute-Force SSH
🇩🇪 Jnthn	2023-10-16 04:12:19 UTC · (3 years ago)	Oct 16 06:12:16 AbuseCatcher sshd[2429141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.187.97.159 user=root Oct 16 06:12:18 AbuseCatcher sshd[2429141]: Failed password for root from 191.187.97.159 por ... show more Oct 16 06:12:16 AbuseCatcher sshd[2429141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.187.97.159 user=root Oct 16 06:12:18 AbuseCatcher sshd[2429141]: Failed password for root from 191.187.97.159 port 60146 ssh2 ... show less	Brute-Force SSH
🇺🇸 MPL	2023-10-16 01:06:04 UTC · (3 years ago)	tcp/56575 (2 or more attempts)	Port Scan
🇺🇸 RAP	2023-10-16 00:47:32 UTC · (3 years ago)	2023-10-16 00:47:32 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 HamSammich	2023-10-16 00:00:00 UTC · (3 years ago)	IP connected to honeypot on port 22	Port Scan Hacking Brute-Force SSH
🇩🇪 nohacefaltapapel-et.net	2023-10-15 23:04:53 UTC · (3 years ago)	2023-10-14T00:22:12.736886asociados1 sshd[1393823]: Invalid user ubnt from 191.187.97.159 port 32962 2023-10-16T01:04:47.113121asociados1 sshd[1981729]: Invalid user pi from 191.187.97.159 port 32964 2023-10-16T01:04:52.778678asociados1 sshd[1981729] ... show more 2023-10-14T00:22:12.736886asociados1 sshd[1393823]: Invalid user ubnt from 191.187.97.159 port 32962 2023-10-16T01:04:47.113121asociados1 sshd[1981729]: Invalid user pi from 191.187.97.159 port 32964 2023-10-16T01:04:52.778678asociados1 sshd[1981729]: error: maximum authentication attempts exceeded for invalid user pi from 191.187.97.159 port 32964 ssh2 [preauth] ... show less	Brute-Force SSH
🇩🇪 Nyvil	2023-10-15 21:10:10 UTC · (3 years ago)	Repeated unauthorized access attempts via SSH	Brute-Force SSH
🇩🇪 laotuo	2023-10-15 20:56:00 UTC · (3 years ago)	Oct 15 22:55:57 h2930838 sshd[24430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.187.97.159 Oct 15 22:55:59 h2930838 sshd[24430]: Failed password for invalid user ubnt from 191.187.97.159 port 35594 s ... show more Oct 15 22:55:57 h2930838 sshd[24430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.187.97.159 Oct 15 22:55:59 h2930838 sshd[24430]: Failed password for invalid user ubnt from 191.187.97.159 port 35594 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 194.5.82.11

🇹🇼 182.173.1.1

🇳🇱 178.62.250.64

🇸🇬 152.42.226.181

100.95.227.190

🇳🇱 45.148.10.151

🇧🇪 35.233.57.205

🇨🇳 157.148.7.224

🇹🇭 118.194.251.17

100.92.28.77

🇧🇬 79.124.60.250

🇸🇾 77.44.234.60

🇺🇸 75.172.54.88

🇨🇦 75.155.183.139

🇺🇸 66.132.195.217

🇩🇪 65.111.23.200

🇵🇭 49.149.198.35

🇳🇱 45.148.10.157

10.144.129.247

10.129.132.136