JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.254.185.85

Neutral Activity

Abuse confidence score ?

0% Low Risk

27 reports

24 reporters · latest 1 year ago

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS27699
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.254.185.85 has been reported 27 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 191.254.185.85

Export CSV

This IP address has been reported a total of 27 times from 24 distinct sources. 191.254.185.85 was first reported on September 1st 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 zwh	2025-09-02 17:57:57 (1 year ago)	SSH Brute-Force	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-02 00:26:55 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/191.254.185.85	SSH
🇨🇦 KIsmay	2025-09-01 17:01:38 (1 year ago)	Sep 1 09:59:08 ismay sshd[2588489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 1 09:59:08 ismay sshd[2588489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 Sep 1 09:59:11 ismay sshd[2588489]: Failed password for invalid user pp from 191.254.185.85 port 55220 ssh2 Sep 1 10:01:36 ismay sshd[2588607]: Invalid user at from 191.254.185.85 port 52382 Sep 1 10:01:36 ismay sshd[2588607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 Sep 1 10:01:37 ismay sshd[2588607]: Failed password for invalid user at from 191.254.185.85 port 52382 ssh2 ... show less	Brute-Force SSH
🇺🇸 netllama	2025-09-01 16:59:35 (1 year ago)	Sep 1 09:57:43 netllama sshd-session[3000164]: User root from 191.254.185.85 not allowed because no ... show more Sep 1 09:57:43 netllama sshd-session[3000164]: User root from 191.254.185.85 not allowed because not listed in AllowUsers Sep 1 09:59:34 netllama sshd-session[3000306]: Invalid user pp from 191.254.185.85 port 33878 ... show less	Brute-Force SSH
🇫🇮 bittiguru.fi	2025-09-01 16:59:23 (1 year ago)	Sep 1 19:59:21 kotimaassafi sshd[1960701]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Sep 1 19:59:21 kotimaassafi sshd[1960701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 Sep 1 19:59:21 kotimaassafi sshd[1960701]: Invalid user pp from 191.254.185.85 port 45548 Sep 1 19:59:23 kotimaassafi sshd[1960701]: Failed password for invalid user pp from 191.254.185.85 port 45548 ssh2 ... show less	Brute-Force SSH
🇬🇧 mateisr	2025-09-01 16:38:50 (1 year ago)	Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
🇰🇷 edisonjwa	2025-09-01 16:38:00 (1 year ago)	2025-09-02T01:27:19.483071+09:00 instance-20210712-1304 sshd[681949]: Invalid user steven from 191.2 ... show more 2025-09-02T01:27:19.483071+09:00 instance-20210712-1304 sshd[681949]: Invalid user steven from 191.254.185.85 port 40210 2025-09-02T01:30:58.220175+09:00 instance-20210712-1304 sshd[682567]: Invalid user ec2-user from 191.254.185.85 port 60820 2025-09-02T01:34:28.971247+09:00 instance-20210712-1304 sshd[683200]: Invalid user ttt from 191.254.185.85 port 54968 2025-09-02T01:36:15.797803+09:00 instance-20210712-1304 sshd[683546]: Invalid user minerhub from 191.254.185.85 port 51320 2025-09-02T01:37:58.683781+09:00 instance-20210712-1304 sshd[683829]: Invalid user socksuser from 191.254.185.85 port 47646 ... show less	Port Scan Brute-Force SSH
🇬🇧 djboddington	2025-09-01 16:37:24 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-01 16:32:30 (1 year ago)	(sshd) Failed SSH login from 191.254.185.85 (BR/Brazil/191-254-185-85.dsl.telesp.net.br): 5 in the l ... show more (sshd) Failed SSH login from 191.254.185.85 (BR/Brazil/191-254-185-85.dsl.telesp.net.br): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 1 11:25:49 15696 sshd[20710]: Invalid user steven from 191.254.185.85 port 46688 Sep 1 11:25:51 15696 sshd[20710]: Failed password for invalid user steven from 191.254.185.85 port 46688 ssh2 Sep 1 11:30:26 15696 sshd[21056]: Invalid user ec2-user from 191.254.185.85 port 38310 Sep 1 11:30:28 15696 sshd[21056]: Failed password for invalid user ec2-user from 191.254.185.85 port 38310 ssh2 Sep 1 11:32:13 15696 sshd[21312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 user=root show less	Brute-Force SSH
🇺🇸 infosec.express	2025-09-01 16:30:16 (1 year ago)	2025-09-01T11:25:08.975625 skippy the magnificent sshd[699430]: Failed password for invalid user ste ... show more 2025-09-01T11:25:08.975625 skippy the magnificent sshd[699430]: Failed password for invalid user steven from 191.254.185.85 port 39142 ssh2 2025-09-01T11:25:11.181058 skippy the magnificent sshd[699430]: Disconnected from invalid user steven 191.254.185.85 port 39142 [preauth] 2025-09-01T11:30:13.806460 skippy the magnificent sshd[699502]: Invalid user ec2-user from 191.254.185.85 port 43780 2025-09-01T11:30:13.814683 skippy the magnificent sshd[699502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 2025-09-01T11:30:15.619564 skippy the magnificent sshd[699502]: Failed password for invalid user ec2-user from 191.254.185.85 port 43780 ssh2 ... show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-09-01 16:25:43 (1 year ago)	191.254.185.85 banned on rtr - Threshold reached: 5 failures	SSH
🇩🇪 on-com	2025-09-01 16:13:37 (1 year ago)	SSH login attempt	SSH
🇺🇸 dev.10bit.link	2025-09-01 16:06:16 (1 year ago)	Sep 1 16:04:24 172-232-1-224 sshd[1570710]: Invalid user iptv from 191.254.185.85 port 46400 Sep 1 ... show more Sep 1 16:04:24 172-232-1-224 sshd[1570710]: Invalid user iptv from 191.254.185.85 port 46400 Sep 1 16:04:24 172-232-1-224 sshd[1570710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 Sep 1 16:04:26 172-232-1-224 sshd[1570710]: Failed password for invalid user iptv from 191.254.185.85 port 46400 ssh2 Sep 1 16:06:14 172-232-1-224 sshd[1570740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 user=root Sep 1 16:06:16 172-232-1-224 sshd[1570740]: Failed password for root from 191.254.185.85 port 44008 ssh2 ... show less	Brute-Force SSH
🇧🇪 madeit	2025-09-01 16:04:49 (1 year ago)		Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-01 15:58:36 (1 year ago)	191.254.185.85 (BR/Brazil/191-254-185-85.dsl.telesp.net.br), 5 distributed sshd attacks on account [ ... show more 191.254.185.85 (BR/Brazil/191-254-185-85.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 1 10:58:33 15736 sshd[4634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.130.207 user=root Sep 1 10:57:37 15736 sshd[4426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.254.185.85 user=root Sep 1 10:57:40 15736 sshd[4426]: Failed password for root from 191.254.185.85 port 57442 ssh2 Sep 1 10:56:34 15736 sshd[4093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.154.201.75 user=root Sep 1 10:56:36 15736 sshd[4093]: Failed password for root from 217.154.201.75 port 57722 ssh2 IP Addresses Blocked: 212.83.130.207 (FR/France/212-83-130-207.rev.poneytelecom.eu) show less	Brute-Force SSH

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.145.66.151

🇨🇦 85.217.149.39

🇬🇧 81.97.108.152

🇨🇳 223.241.214.127

🇧🇪 207.175.220.59

🇮🇳 203.192.207.38

🇸🇰 188.167.251.171

🇪🇸 188.79.179.87

🇦🇷 186.158.183.66

🇨🇳 183.237.142.82

🇧🇩 103.137.73.24

🇧🇩 103.94.129.2

🇷🇺 95.104.174.26

🇳🇱 77.91.71.92

🇺🇸 66.132.172.206

🇮🇩 36.37.73.242

🇹🇼 198.235.24.88

🇧🇷 187.51.84.86

🇺🇸 172.191.178.196

🇮🇳 117.219.80.154