JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.54.253.118

191.54.253.118 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	ALGAR TELECOM S/A
Usage Type	Fixed Line ISP
ASN	AS53006
Hostname(s)	191-054-253-118.xd-dynamic.algarnetsuper.com.br
Domain Name	algar.com.br
Country	🇧🇷 Brazil
City	Sao Jose do Rio Preto, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.54.253.118

Whois 191.54.253.118

IP Abuse Reports for 191.54.253.118:

This IP address has been reported a total of 32 times from 24 distinct sources. 191.54.253.118 was first reported on July 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-07-27 21:01:37 (1 day ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/4145 (socks). Tried credentials ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/4145 (socks). Tried credentials: b'michael':None Family fingerprint: proxy-scanner Commands captured: $ socks4a CONNECT -> api.ipify.org:443 $ user_id: 'michael' show less	DDoS Attack
🇫🇷 tecnicorioja	2026-07-27 18:00:53 (1 day ago)	Failed password for invalid user Jul 27 18:02:16 port 47111	Brute-Force SSH
🇫🇷 LRNP	2026-07-27 17:47:02 (1 day ago)	2026-07-27T17:46:59.136467+00:00 helium sshd-session[3802703]: pam_unix(sshd:auth): authentication f ... show more 2026-07-27T17:46:59.136467+00:00 helium sshd-session[3802703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.253.118 2026-07-27T17:47:01.642146+00:00 helium sshd-session[3802703]: Failed password for invalid user ubuntu from 191.54.253.118 port 6774 ssh2 2026-07-27T17:47:02.341294+00:00 helium sshd-session[3802703]: Connection closed by invalid user ubuntu 191.54.253.118 port 6774 [preauth] ... show less	Brute-Force SSH
🇩🇪 formality	2026-07-27 17:29:58 (1 day ago)	Invalid user ubuntu from 191.54.253.118 port 6334	Brute-Force SSH
🇳🇱 reporter_anon	2026-07-27 17:28:57 (1 day ago)	Invalid user ubuntu from 191.54.253.118 port 6316	Brute-Force SSH
🇫🇮 6kilowatti	2026-07-27 17:27:06 (1 day ago)	2026-07-27T20:27:04.081875+03:00 koti sshd[450642]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-07-27T20:27:04.081875+03:00 koti sshd[450642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.253.118 2026-07-27T20:27:05.961271+03:00 koti sshd[450642]: Failed password for invalid user ubuntu from 191.54.253.118 port 6284 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 17:13:40 (1 day ago)	191.54.253.118 (BR/Brazil/191-054-253-118.xd-dynamic.algarnetsuper.com.br), 5 distributed sshd attac ... show more 191.54.253.118 (BR/Brazil/191-054-253-118.xd-dynamic.algarnetsuper.com.br), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 11:58:35 14827 sshd[31756]: Invalid user ubuntu from 191.54.253.118 port 5156 Jul 27 11:58:36 14827 sshd[31756]: Failed password for invalid user ubuntu from 191.54.253.118 port 5156 ssh2 Jul 27 12:13:24 14827 sshd[6751]: Invalid user ubuntu from 43.255.141.80 port 50236 Jul 27 12:03:32 14827 sshd[1776]: Invalid user ubuntu from 20.205.115.225 port 42450 Jul 27 12:03:34 14827 sshd[1776]: Failed password for invalid user ubuntu from 20.205.115.225 port 42450 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 nicosqc	2026-07-27 17:00:34 (1 day ago)	Invalid user ubuntu from 191.54.253.118 port 45763	Brute-Force SSH
🇩🇪 nicosqc	2026-07-27 17:00:34 (1 day ago)	Invalid user ubuntu from 191.54.253.118 port 45763	Brute-Force SSH
🇨🇳 さいとうあすか	2026-07-27 16:51:40 (1 day ago)	2026-07-28T00:51:37.029890+08:00 pbs sshd[3918896]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-07-28T00:51:37.029890+08:00 pbs sshd[3918896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.253.118 2026-07-28T00:51:38.909330+08:00 pbs sshd[3918896]: Failed password for invalid user ubuntu from 191.54.253.118 port 4956 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-27 16:35:24 (1 day ago)	191.54.253.118 (BR/Brazil/191-054-253-118.xd-dynamic.algarnetsuper.com.br), 5 distributed sshd attac ... show more 191.54.253.118 (BR/Brazil/191-054-253-118.xd-dynamic.algarnetsuper.com.br), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 27 11:35:08 14606 sshd[22556]: Invalid user ubuntu from 49.36.44.46 port 1064 Jul 27 11:30:11 14606 sshd[19834]: Invalid user ubuntu from 218.147.222.35 port 57271 Jul 27 11:30:13 14606 sshd[19834]: Failed password for invalid user ubuntu from 218.147.222.35 port 57271 ssh2 Jul 27 11:25:26 14606 sshd[17171]: Invalid user ubuntu from 191.54.253.118 port 47901 Jul 27 11:25:27 14606 sshd[17171]: Failed password for invalid user ubuntu from 191.54.253.118 port 47901 ssh2 IP Addresses Blocked: 49.36.44.46 (IN/India/-) 218.147.222.35 (KR/South Korea/-) show less	Brute-Force SSH
🇺🇸 Like Ma	2026-07-27 16:33:56 (1 day ago)	Jul 27 12:33:52 newage sshd[2494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 27 12:33:52 newage sshd[2494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.253.118 Jul 27 12:33:54 newage sshd[2494]: Failed password for invalid user ubuntu from 191.54.253.118 port 48069 ssh2 ... show less	Brute-Force SSH
🇫🇷 Vincent6785_0	2026-07-27 16:25:29 (1 day ago)	Observed automated SSH brute-force activity. Attempts: 4 \| Failed password: 2 \| Invalid user: 2 Firs ... show more Observed automated SSH brute-force activity. Attempts: 4 \| Failed password: 2 \| Invalid user: 2 First seen: 2026-07-27 16:06:58 UTC Last seen: 2026-07-27 16:25:29 UTC Source: Linux OpenSSH journalctl telemetry from OVH-hosted Debian server. show less	Brute-Force SSH
Anonymous	2026-07-27 16:18:56 (1 day ago)	2026-07-27T18:18:52.817400 localhost.localdomain sshd-session[278862]: pam_unix(sshd:auth): authenti ... show more 2026-07-27T18:18:52.817400 localhost.localdomain sshd-session[278862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.253.118 2026-07-27T18:18:55.605002 localhost.localdomain sshd-session[278862]: Failed password for invalid user ubuntu from 191.54.253.118 port 47777 ssh2 ... show less	Brute-Force SSH
🇩🇪 formality	2026-07-27 16:09:27 (1 day ago)	Invalid user ubuntu from 191.54.253.118 port 3830	Brute-Force SSH

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.122.238

🇧🇷 205.210.31.178

🇳🇱 192.253.248.59

🇿🇦 154.16.95.149

🇮🇳 143.110.246.124

🇺🇸 104.28.219.194

🇺🇦 91.222.66.96

🇮🇷 85.185.201.10

🇳🇱 45.148.10.147

🇺🇸 34.135.200.178

🇨🇳 220.179.87.204

🇺🇿 185.74.7.77

🇧🇷 177.53.84.14

🇵🇱 176.53.159.198

🇺🇸 167.172.150.45

🇷🇺 95.47.246.223

🇫🇷 91.196.152.35

🇺🇸 45.79.149.143

🇹🇼 35.194.201.92

🇳🇱 2.59.169.59