JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.243.209.249

Neutral Activity

Abuse Confidence Score

0% Low Risk

26 reports

23 reporters · latest 5 months ago

ISP: SIGNAL PROVEDOR DE ACESSO A INTERNET LTDA
Usage Type: Fixed Line ISP
ASN: AS263513
Domain Name: signalbr.com.br
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.243.209.249 has been reported 26 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

26 from 23 distinct reporters

First reported

January 13th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 UTC · (5 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇮🇹 alph44	2026-05-05 07:55:46 UTC · (6 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇳🇱 SchorelWeb	2026-05-05 06:58:19 UTC · (6 months ago)	Cluster member (Omitted) (US/United States/-) said, DENY 191.243.209.249, Reason:[(sshd) Failed SSH login from 191.243.209.249 (BR/Brazil/-): 5 in the last 3600 secs]	Brute-Force SSH
🇮🇳 evicky2002	2026-05-05 06:00:00 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=86, sources=1)	Hacking Brute-Force SSH
🇹🇭 Sawasdee	2026-05-05 05:33:07 UTC · (6 months ago)	SSH break in attempt ...	SSH
Anonymous	2026-05-05 05:00:02 UTC · (6 months ago)	ET SCAN Potential SSH Scan	Port Scan
Anonymous	2026-05-05 04:38:12 UTC · (6 months ago)	IP banned by Fail2Ban	Brute-Force SSH
🇵🇱 mkey	2026-05-05 03:55:01 UTC · (6 months ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=22 \| HITS=2 \| IPSET=ADD \| FIRST=2026-05-05 05:52:24 \| LAST=2026-05-05 05:52:25. Last seen 2026-05-05 05:52:25.	Port Scan
🇫🇮 iamxorum	2026-05-05 03:26:10 UTC · (6 months ago)	2026-05-05T03:26:09.311466+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=191.243.209.249 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=32026 DF PROTO=TCP SPT=54622 DPT=2222 WINDOW=64800 RES=0x0 ... show more 2026-05-05T03:26:09.311466+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=191.243.209.249 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=32026 DF PROTO=TCP SPT=54622 DPT=2222 WINDOW=64800 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 yvoictra	2026-05-05 02:42:04 UTC · (6 months ago)	May 5 04:42:03 niove sshd[688807]: Invalid user a from 191.243.209.249 port 41072 ...	Brute-Force SSH
🇵🇱 strefapi_com	2026-05-05 02:35:49 UTC · (6 months ago)	2026-05-05T04:35:40.093449+02:00 mail sshd-session[390078]: Invalid user a from 191.243.209.249 port 43862 2026-05-05T04:35:42.567144+02:00 mail sshd-session[390078]: Failed password for invalid user a from 191.243.209.249 port 43862 ssh2 2026-05-05T ... show more 2026-05-05T04:35:40.093449+02:00 mail sshd-session[390078]: Invalid user a from 191.243.209.249 port 43862 2026-05-05T04:35:42.567144+02:00 mail sshd-session[390078]: Failed password for invalid user a from 191.243.209.249 port 43862 ssh2 2026-05-05T04:35:44.317440+02:00 mail sshd-session[390080]: Invalid user nil from 191.243.209.249 port 51262 2026-05-05T04:35:45.855493+02:00 mail sshd-session[390082]: Invalid user admin from 191.243.209.249 port 53784 2026-05-05T04:35:48.152128+02:00 mail sshd-session[390082]: Failed password for invalid user admin from 191.243.209.249 port 53784 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-05 01:38:23 UTC · (6 months ago)	(sshd) Failed SSH login from 191.243.209.249 (BR/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 4 20:38:02 14084 sshd[15961]: Did not receive identification string from 191.243.209.249 port 37764 May 4 20:38:03 1 ... show more (sshd) Failed SSH login from 191.243.209.249 (BR/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 4 20:38:02 14084 sshd[15961]: Did not receive identification string from 191.243.209.249 port 37764 May 4 20:38:03 14084 sshd[15962]: Invalid user a from 191.243.209.249 port 38016 May 4 20:38:05 14084 sshd[15962]: Failed password for invalid user a from 191.243.209.249 port 38016 ssh2 May 4 20:38:06 14084 sshd[15964]: Invalid user nil from 191.243.209.249 port 42606 May 4 20:38:07 14084 sshd[15966]: Invalid user admin from 191.243.209.249 port 44544 show less	Brute-Force SSH
🇫🇷 Asthriona	2026-05-05 00:45:29 UTC · (6 months ago)	May 5 02:44:13 Lyra sshd[165380]: Failed password for invalid user a from 191.243.209.249 port 53918 ssh2 May 5 02:44:50 Lyra sshd[165382]: Invalid user nil from 191.243.209.249 port 38764 May 5 02:44:52 Lyra sshd[165382]: Failed none for invalid ... show more May 5 02:44:13 Lyra sshd[165380]: Failed password for invalid user a from 191.243.209.249 port 53918 ssh2 May 5 02:44:50 Lyra sshd[165382]: Invalid user nil from 191.243.209.249 port 38764 May 5 02:44:52 Lyra sshd[165382]: Failed none for invalid user nil from 191.243.209.249 port 38764 ssh2 May 5 02:45:24 Lyra sshd[165391]: Invalid user admin from 191.243.209.249 port 60028 May 5 02:45:26 Lyra sshd[165391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.249 May 5 02:45:28 Lyra sshd[165391]: Failed password for invalid user admin from 191.243.209.249 port 60028 ssh2 ... show less	Brute-Force SSH
🇫🇮 Josh S.	2026-05-04 23:47:44 UTC · (6 months ago)	2026-05-04T18:47:31.685967-05:00 vault sshd[2356114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.249 2026-05-04T18:47:33.904691-05:00 vault sshd[2356114]: Failed password for invalid user a fro ... show more 2026-05-04T18:47:31.685967-05:00 vault sshd[2356114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.249 2026-05-04T18:47:33.904691-05:00 vault sshd[2356114]: Failed password for invalid user a from 191.243.209.249 port 60582 ssh2 2026-05-04T18:47:40.174226-05:00 vault sshd[2356868]: Invalid user nil from 191.243.209.249 port 50352 2026-05-04T18:47:40.753543-05:00 vault sshd[2356868]: Failed none for invalid user nil from 191.243.209.249 port 50352 ssh2 2026-05-04T18:47:43.459550-05:00 vault sshd[2357612]: Invalid user admin from 191.243.209.249 port 36238 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-05-04 23:41:13 UTC · (6 months ago)	May 4 17:41:07 b146-13 sshd[3561047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.249 May 4 17:41:09 b146-13 sshd[3561047]: Failed password for invalid user a from 191.243.209.249 port 45978 ... show more May 4 17:41:07 b146-13 sshd[3561047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.209.249 May 4 17:41:09 b146-13 sshd[3561047]: Failed password for invalid user a from 191.243.209.249 port 45978 ssh2 May 4 17:41:12 b146-13 sshd[3561054]: Invalid user nil from 191.243.209.249 port 34442 ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 93.190.110.226

🇺🇸 16.145.13.159

🇺🇸 216.73.217.46

🇩🇪 185.249.245.62

🇺🇸 147.182.210.99

🇳🇱 89.21.67.162

🇫🇷 45.77.61.56

🇰🇪 41.90.144.84

🇺🇿 213.230.127.104

🇧🇬 193.24.211.206

🇵🇦 190.14.223.82

🇵🇱 172.69.155.5

🇳🇱 77.239.124.156

🇳🇱 45.148.10.157

🇮🇹 31.189.133.208

🇳🇱 2a0f:ca80:b00b:c2fc::5

🇺🇸 212.119.47.91

🇦🇷 190.172.44.40

🇧🇷 186.193.60.162

🇸🇬 175.156.127.110