191.243.209.231

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
160 reports
124 reporters · latest 3 months ago
ISP
SIGNAL PROVEDOR DE ACESSO A INTERNET LTDA
Usage Type
Fixed Line ISP
ASN
AS263513
Domain Name
signalbr.com.br
Country
🇧🇷 Brazil
City
Sao Paulo, Sao Paulo
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

191.243.209.231 has been reported 160 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
160 from 124 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs identified 191.243.209.231 as a malicious indicator from threat intelligence.
DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇦🇹 kuppit
Honeypot bot from BR: 24 SSH login attempts; first seen 2026-05-04T23:50:07, last seen 2026-05-04T23:59:18; client banner: SSH-2.0-OpenSSH_10.0
Brute-Force SSH
🇩🇪 stel67pi
2026-05-05T22:31:15.428995+03:00 pistats sshd[161585]: Connection from 191.243.209.231 port 40410 on 10.0.0.24 port 22 rdomain "" 2026-05-05T22:31:15.504561+03:00 pistats sshd[161585]: kex_exchange_identification: Connection closed by remote host ...
Brute-Force SSH
🇩🇪 Justin F. | AS204464
Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2222 [2] TCP Reported by: Justin F.
Port Scan
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: Attacker IP 191.
DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇩🇪 LoNET
Report 2337779 with IP 3385342 for SSH brute-force attack by source 3380004 via ssh-honeypot/0.2.1+http
Brute-Force SSH
🇺🇸 yzfdude1
Brute-Force SSH
🇮🇹 paradoxnetworks
Brute-Force SSH
🇳🇱 sh97
Brute-Force SSH
🇺🇸 bigscoots.com
Brute-Force SSH
🇺🇸 MPL
tcp ports: 2222,22 (6 or more attempts)
Port Scan
🇨🇭 liloscambio.ch
Brute-Force SSH
🇺🇸 bigscoots.com
Brute-Force SSH
🇵🇱 skillhost.pl
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 201.3.82.156
🇩🇪 185.176.255.72
🇻🇳 171.235.23.158
🇳🇱 85.11.167.204
🇨🇳 36.137.180.219
🇮🇩 36.67.227.241
🇬🇧 35.203.210.183
🇨🇳 183.233.155.146
🇻🇳 171.244.143.209
🇻🇳 171.244.39.95
🇨🇳 121.46.244.22
🇬🇧 101.36.97.80
🇳🇱 45.148.10.141
🇨🇳 175.153.221.109
🇺🇸 174.170.6.46
🇷🇴 80.94.92.234
🇳🇱 77.67.26.126
🇳🇱 194.33.46.74
🇵🇹 149.90.33.92
🇺🇸 147.185.132.151
feedback