JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.255.181.141

Neutral Activity

Abuse Confidence Score

0% Low Risk

315 reports

146 reporters · latest 3 months ago

ISP: TELEFÔNICA BRASIL S.A
Usage Type: Fixed Line ISP
ASN: AS27699
Domain Name: telefonica.com.br
Country: 🇧🇷 Brazil
City: Campinas, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.255.181.141 has been reported 315 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

315 from 146 distinct reporters

First reported

April 21st 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-08-01 18:22:07 UTC · (3 months ago)	ICS Labs identified 191.255.181.141 as a malicious indicator from threat intelligence.	Hacking
🇮🇳 evicky2002	2026-06-29 10:48:52 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 ICS Labs	2026-05-20 13:06:42 UTC · (5 months ago)	ICS Labs identified 191.255.181.141 as a malicious indicator from threat intelligence.	Hacking
🇺🇸 sh97	2026-04-29 11:12:47 UTC · (6 months ago)	US912-CCN.idler: SSH Brute Force from 191.255.181.141 at 2026-04-29 15:12:47 +04	Brute-Force SSH
🇳🇱 jonathanselea.se	2026-04-27 05:01:56 UTC · (6 months ago)	"Exessive login attempts"	Brute-Force
🇫🇷 SpaceHost-Server	2026-04-26 22:42:12 UTC · (6 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-24 23:22:51 UTC · (6 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/191.255.181.141	SSH
🇫🇷 SpaceHost-Server	2026-04-24 22:39:37 UTC · (6 months ago)		Brute-Force Web App Attack
🇳🇱 jonathanselea.se	2026-04-24 20:14:31 UTC · (6 months ago)	"Exessive login attempts"	Brute-Force
🇫🇷 tecnicorioja	2026-04-24 06:45:22 UTC · (6 months ago)	Failed password for root Apr 24 04:46:42 port 52792	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-24 04:40:58 UTC · (6 months ago)	191.255.181.141 (BR/Brazil/191-255-181-141.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 22:50:23 14664 sshd[6635]: pam_unix(sshd:auth): authentica ... show more 191.255.181.141 (BR/Brazil/191-255-181-141.dsl.telesp.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 22:50:23 14664 sshd[6635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.81.208.10 user=root Apr 23 22:50:24 14664 sshd[6635]: Failed password for root from 192.81.208.10 port 52042 ssh2 Apr 23 23:40:33 14664 sshd[14672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.255.52.36 user=root Apr 23 23:36:25 14664 sshd[14043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.255.181.141 user=root Apr 23 23:36:27 14664 sshd[14043]: Failed password for root from 191.255.181.141 port 56024 ssh2 IP Addresses Blocked: 192.81.208.10 (US/United States/-) 191.255.52.36 (BR/Brazil/191-255-52-36.dsl.telesp.net.br) show less	Brute-Force SSH
🇰🇷 Woodie	2026-04-24 04:28:48 UTC · (6 months ago)	2026-04-24T00:24:11.422552-04:00 debian sshd[454498]: Invalid user ubuntu from 191.255.181.141 port 48978 2026-04-24T00:24:11.426015-04:00 debian sshd[454498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=19 ... show more 2026-04-24T00:24:11.422552-04:00 debian sshd[454498]: Invalid user ubuntu from 191.255.181.141 port 48978 2026-04-24T00:24:11.426015-04:00 debian sshd[454498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.255.181.141 2026-04-24T00:24:13.167110-04:00 debian sshd[454498]: Failed password for invalid user ubuntu from 191.255.181.141 port 48978 ssh2 2026-04-24T00:28:46.413972-04:00 debian sshd[456603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.255.181.141 user=root 2026-04-24T00:28:48.239940-04:00 debian sshd[456603]: Failed password for root from 191.255.181.141 port 47590 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-04-24 04:23:59 UTC · (6 months ago)	Invalid user bot from 191.255.181.141 port 52182	Brute-Force SSH
🇨🇦 bdonvr	2026-04-24 04:14:58 UTC · (6 months ago)	2026-04-24T04:14:58.124851+00:00 thelemmy.club sshd-session[3690515]: Invalid user test from 191.255.181.141 port 44966 2026-04-24T04:14:58.275819+00:00 thelemmy.club sshd-session[3690515]: Disconnected from invalid user test 191.255.181.141 port 449 ... show more 2026-04-24T04:14:58.124851+00:00 thelemmy.club sshd-session[3690515]: Invalid user test from 191.255.181.141 port 44966 2026-04-24T04:14:58.275819+00:00 thelemmy.club sshd-session[3690515]: Disconnected from invalid user test 191.255.181.141 port 44966 [preauth] ... show less	Brute-Force SSH
🇩🇪 simsung	2026-04-24 02:58:33 UTC · (6 months ago)	2026-04-24T02:47:03.017841+00:00 vps-d3a39c2f sshd-session[1460276]: Invalid user oracle from 191.255.181.141 port 51364 2026-04-24T02:54:45.157756+00:00 vps-d3a39c2f sshd-session[1467171]: Invalid user test from 191.255.181.141 port 49570 2026-04-24 ... show more 2026-04-24T02:47:03.017841+00:00 vps-d3a39c2f sshd-session[1460276]: Invalid user oracle from 191.255.181.141 port 51364 2026-04-24T02:54:45.157756+00:00 vps-d3a39c2f sshd-session[1467171]: Invalid user test from 191.255.181.141 port 49570 2026-04-24T02:58:31.925489+00:00 vps-d3a39c2f sshd-session[1470531]: Invalid user gitlab-runner from 191.255.181.141 port 54530 ... show less	Brute-Force SSH

Showing 1 to 15 of 315 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 193.37.32.5

🇨🇭 179.43.153.10

🇺🇸 174.129.106.26

🇺🇦 159.224.231.140

🇧🇩 138.252.238.86

🇧🇩 116.68.206.137

🇻🇳 104.28.254.75

🇨🇿 77.75.76.165

🇮🇶 62.201.212.54

🇮🇳 61.246.239.15

🇨🇳 60.21.100.63

🇺🇸 50.6.192.84

🇰🇭 49.156.39.242

🇫🇷 45.91.22.18

🇫🇷 45.91.22.14

🇫🇷 45.91.22.11

🇫🇷 45.91.22.10

🇦🇺 35.244.66.205

🇹🇼 34.80.100.165

🇹🇭 34.15.157.111