JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.243.209.231

Neutral Activity

Abuse Confidence Score

0% Low Risk

160 reports

124 reporters · latest 3 months ago

ISP: SIGNAL PROVEDOR DE ACESSO A INTERNET LTDA
Usage Type: Fixed Line ISP
ASN: AS263513
Domain Name: signalbr.com.br
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.243.209.231 has been reported 160 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

160 from 124 distinct reporters

First reported

August 23rd 2024

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-10 19:03:41 UTC · (3 months ago)	ICS Labs identified 191.243.209.231 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇦🇹 kuppit	2026-05-07 12:13:28 UTC · (6 months ago)	Honeypot bot from BR: 24 SSH login attempts; first seen 2026-05-04T23:50:07, last seen 2026-05-04T23:59:18; client banner: SSH-2.0-OpenSSH_10.0	Brute-Force SSH
🇩🇪 stel67pi	2026-05-05 19:31:16 UTC · (6 months ago)	2026-05-05T22:31:15.428995+03:00 pistats sshd[161585]: Connection from 191.243.209.231 port 40410 on 10.0.0.24 port 22 rdomain "" 2026-05-05T22:31:15.504561+03:00 pistats sshd[161585]: kex_exchange_identification: Connection closed by remote host ...	Brute-Force SSH
🇩🇪 Justin F. \| AS204464	2026-05-05 19:16:58 UTC · (6 months ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2222 [2] TCP Reported by: Justin F.	Port Scan
🇩🇪 Da_tschek	2026-05-05 18:57:02 UTC · (6 months ago)	Port scanning	Port Scan Hacking
🇺🇸 LSPCCU	2026-05-05 18:25:57 UTC · (6 months ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: Attacker IP 191.	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇩🇪 LoNET	2026-05-05 18:19:56 UTC · (6 months ago)	Report 2337779 with IP 3385342 for SSH brute-force attack by source 3380004 via ssh-honeypot/0.2.1+http	Brute-Force SSH
🇺🇸 yzfdude1	2026-05-05 16:44:37 UTC · (6 months ago)	May 5 10:44:31 goofy sshd[1478774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 May 5 10:44:34 goofy sshd[1478774]: Failed password for invalid user a from 191.243.209.231 port 55184 ssh2 ... show more May 5 10:44:31 goofy sshd[1478774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 May 5 10:44:34 goofy sshd[1478774]: Failed password for invalid user a from 191.243.209.231 port 55184 ssh2 May 5 10:44:35 goofy sshd[1478776]: Invalid user nil from 191.243.209.231 port 34382 ... show less	Brute-Force SSH
🇮🇹 paradoxnetworks	2026-05-05 15:08:32 UTC · (6 months ago)	2026-05-05T15:08:24.775157+00:00 edge-fog-swb01.int.pdx.net.uk sshd[3817158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 2026-05-05T15:08:27.604066+00:00 edge-fog-swb01.int.pdx.net.uk sshd[ ... show more 2026-05-05T15:08:24.775157+00:00 edge-fog-swb01.int.pdx.net.uk sshd[3817158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 2026-05-05T15:08:27.604066+00:00 edge-fog-swb01.int.pdx.net.uk sshd[3817158]: Failed password for invalid user a from 191.243.209.231 port 51520 ssh2 2026-05-05T15:08:31.462721+00:00 edge-fog-swb01.int.pdx.net.uk sshd[3817160]: Invalid user nil from 191.243.209.231 port 35158 ... show less	Brute-Force SSH
🇳🇱 sh97	2026-05-05 14:57:03 UTC · (6 months ago)	May 5 20:26:59 NL04-VM-AMS sshd[2080707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 May 5 20:27:01 NL04-VM-AMS sshd[2080707]: Failed password for invalid user a from 191.243.209.231 por ... show more May 5 20:26:59 NL04-VM-AMS sshd[2080707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 May 5 20:27:01 NL04-VM-AMS sshd[2080707]: Failed password for invalid user a from 191.243.209.231 port 35152 ssh2 May 5 20:27:02 NL04-VM-AMS sshd[2080710]: Invalid user nil from 191.243.209.231 port 40670 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-05 14:40:55 UTC · (6 months ago)	(sshd) Failed SSH login from 191.243.209.231 (BR/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 5 09:40:47 14014 sshd[17710]: Did not receive identification string from 191.243.209.231 port 32792 May 5 09:40:48 1 ... show more (sshd) Failed SSH login from 191.243.209.231 (BR/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 5 09:40:47 14014 sshd[17710]: Did not receive identification string from 191.243.209.231 port 32792 May 5 09:40:48 14014 sshd[17711]: Invalid user a from 191.243.209.231 port 33070 May 5 09:40:50 14014 sshd[17711]: Failed password for invalid user a from 191.243.209.231 port 33070 ssh2 May 5 09:40:51 14014 sshd[17713]: Invalid user nil from 191.243.209.231 port 39360 May 5 09:40:52 14014 sshd[17718]: Invalid user admin from 191.243.209.231 port 41194 show less	Brute-Force SSH
🇺🇸 MPL	2026-05-05 14:36:40 UTC · (6 months ago)	tcp ports: 2222,22 (6 or more attempts)	Port Scan
🇨🇭 liloscambio.ch	2026-05-05 13:59:37 UTC · (6 months ago)	2026-05-05T15:59:34.258150+02:00 liloscambio sshd[2953506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 2026-05-05T15:59:36.111108+02:00 liloscambio sshd[2953506]: Failed password for inval ... show more 2026-05-05T15:59:34.258150+02:00 liloscambio sshd[2953506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.231 2026-05-05T15:59:36.111108+02:00 liloscambio sshd[2953506]: Failed password for invalid user a from 191.243.209.231 port 42754 ssh2 2026-05-05T15:59:37.633793+02:00 liloscambio sshd[2953512]: Invalid user nil from 191.243.209.231 port 48680 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-05 13:44:52 UTC · (6 months ago)	(sshd) Failed SSH login from 191.243.209.231 (BR/Brazil/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 5 08:44:41 14190 sshd[29002]: Did not receive identification string from 191.243.209.231 port 35260 May 5 08:44 ... show more (sshd) Failed SSH login from 191.243.209.231 (BR/Brazil/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 5 08:44:41 14190 sshd[29002]: Did not receive identification string from 191.243.209.231 port 35260 May 5 08:44:42 14190 sshd[29003]: Invalid user a from 191.243.209.231 port 35578 May 5 08:44:45 14190 sshd[29003]: Failed password for invalid user a from 191.243.209.231 port 35578 ssh2 May 5 08:44:46 14190 sshd[29005]: Invalid user nil from 191.243.209.231 port 42228 May 5 08:44:48 14190 sshd[29007]: Invalid user admin from 191.243.209.231 port 44906 show less	Brute-Force SSH
🇵🇱 skillhost.pl	2026-05-05 13:36:21 UTC · (6 months ago)	Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.	Brute-Force SSH

Showing 1 to 15 of 160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 113.24.225.21

🇷🇺 89.109.47.84

🇬🇧 8.228.55.199

🇰🇷 222.110.42.50

🇰🇷 220.76.91.28

🇨🇱 201.215.94.55

🇺🇸 199.165.159.51

🇧🇷 186.248.197.77

🇫🇷 185.157.247.92

🇧🇷 177.16.198.72

🇵🇱 162.158.172.157

🇫🇮 157.22.100.17

🇧🇩 103.113.16.105

🇫🇷 77.32.148.41

🇦🇿 62.217.148.182

🇳🇱 45.153.34.104

🇻🇳 45.122.242.218

🇫🇮 216.40.73.86

🇧🇷 200.15.16.123

🇺🇸 185.61.222.137