JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.54.85.112

Recent Activity

Abuse Confidence Score

99% Critical

25 reports

21 reporters · latest 4 days ago

ISP: ALGAR TELECOM S/A
Usage Type: Fixed Line ISP
ASN: AS53006
Domain Name: algar.com.br
Country: 🇧🇷 Brazil
City: Nova Serrana, Minas Gerais

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

25 from 21 distinct reporters

First reported

November 23rd 2021

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 6 🇳🇱 Netherlands 3 🇺🇸 United States of America 3

Most common categories SSH 22 Brute-Force 19 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 D3vNu11	2026-11-11 08:03:19 UTC · (4 days ago)	Level: (LOW): Reputation Unknown via Cowrie IOC Country: Brazil 9x -> Target Country: Germany SSH	Brute-Force SSH
🇳🇱 vftable	2026-11-11 07:33:16 UTC · (4 days ago)	2026-11-11T08:29:23.725790+01:00 naomi sshd[924421]: Disconnected from authenticating user root 191.54.85.112 port 55230 [preauth] 2026-11-11T08:33:13.931662+01:00 naomi sshd[924483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more 2026-11-11T08:29:23.725790+01:00 naomi sshd[924421]: Disconnected from authenticating user root 191.54.85.112 port 55230 [preauth] 2026-11-11T08:33:13.931662+01:00 naomi sshd[924483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T08:33:15.655721+01:00 naomi sshd[924483]: Failed password for root from 191.54.85.112 port 45136 ssh2 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-11-11 07:30:23 UTC · (4 days ago)	2026-11-11T00:17:05.381039-07:00 b146-47 sshd[367262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T00:17:07.215546-07:00 b146-47 sshd[367262]: Failed password for invalid ... show more 2026-11-11T00:17:05.381039-07:00 b146-47 sshd[367262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T00:17:07.215546-07:00 b146-47 sshd[367262]: Failed password for invalid user root from 191.54.85.112 port 58060 ssh2 2026-11-11T00:30:22.957862-07:00 b146-47 sshd[367760]: User root from 191.54.85.112 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇩🇪 D3vNu11	2026-11-11 07:09:05 UTC · (4 days ago)	Level: (MEDIUM): Reputation Unknown via Cowrie IOC Country: Brazil 25x -> Target Country: Germany SSH	Brute-Force SSH
🇩🇪 resib.labs	2026-11-11 06:34:12 UTC · (4 days ago)	2026-11-11T06:30:19.949344 DE-NB-1 sshd[2930931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T06:30:22.235757 DE-NB-1 sshd[2930931]: Failed password for root from 191.54. ... show more 2026-11-11T06:30:19.949344 DE-NB-1 sshd[2930931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T06:30:22.235757 DE-NB-1 sshd[2930931]: Failed password for root from 191.54.85.112 port 48310 ssh2 2026-11-11T06:34:09.878903 DE-NB-1 sshd[2931004]: Invalid user steam from 191.54.85.112 port 38462 2026-11-11T06:34:09.884626 DE-NB-1 sshd[2931004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 2026-11-11T06:34:11.413032 DE-NB-1 sshd[2931004]: Failed password for invalid user steam from 191.54.85.112 port 38462 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-11-11 05:42:25 UTC · (4 days ago)	2026-11-11T13:34:41.549580+08:00 HKCM1-20251208195653fcc911 sshd-session[112403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 2026-11-11T13:34:44.114721+08:00 HKCM1-20251208195653fcc911 sshd-s ... show more 2026-11-11T13:34:41.549580+08:00 HKCM1-20251208195653fcc911 sshd-session[112403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 2026-11-11T13:34:44.114721+08:00 HKCM1-20251208195653fcc911 sshd-session[112403]: Failed password for invalid user admin from 191.54.85.112 port 34804 ssh2 2026-11-11T13:38:37.803767+08:00 HKCM1-20251208195653fcc911 sshd-session[112661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T13:38:40.071880+08:00 HKCM1-20251208195653fcc911 sshd-session[112661]: Failed password for root from 191.54.85.112 port 53184 ssh2 2026-11-11T13:42:22.087473+08:00 HKCM1-20251208195653fcc911 sshd-session[112896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root 2026-11-11T13:42:24.204863+08:00 HKCM1-20251208195653fcc911 sshd-session[112896]: Failed password for root from 191.54.85.112 po ... show less	Brute-Force SSH
🇬🇧 knock	2026-11-11 04:39:35 UTC · (4 days ago)	Knock-Knock honeypot brute-force: SSH (20 total hits)	Brute-Force SSH
Anonymous	2026-11-11 03:51:55 UTC · (4 days ago)	2026-11-11T04:48:10.125830+01:00 doolittle sshd[2394548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=[redacted] 2026-11-11T04:48:12.122317+01:00 doolittle sshd[2394548]: Failed password ... show more 2026-11-11T04:48:10.125830+01:00 doolittle sshd[2394548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=[redacted] 2026-11-11T04:48:12.122317+01:00 doolittle sshd[2394548]: Failed password for [redacted] from 191.54.85.112 port 60572 ssh2 2026-11-11T04:51:53.022418+01:00 doolittle sshd[2394726]: Invalid user [redacted] from 191.54.85.112 port 50606 2026-11-11T04:51:53.025358+01:00 doolittle sshd[2394726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 2026-11-11T04:51:54.635507+01:00 doolittle sshd[2394726]: Failed password for [redacted] from 191.54.85.112 port 50606 ssh2 ... show less	Brute-Force SSH
🇺🇸 mentality	2026-11-11 03:48:58 UTC · (4 days ago)	Banned due to repeated failed login attempts	Brute-Force SSH
🇫🇷 sshboga	2026-11-11 03:45:02 UTC · (4 days ago)	SSH brute-force on cowrie honeypot port 22. 5 login attempt(s). Usernames: root, ubuntu. Passwords tried: 475869, Abc12345, a123456789., Hn123456, @WSX3edc4rfv.	Brute-Force SSH
🇹🇷 pasifik3428	2026-11-11 03:35:58 UTC · (4 days ago)	(sshd) Failed SSH login from 191.54.85.112 (BR/Brazil/191-054-085-112.xd-dynamic.algarnetsuper.com.br): 5 in the last 3600 secs \| Nov 11 06:13:24 ns1 sshd[2733067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ... show more (sshd) Failed SSH login from 191.54.85.112 (BR/Brazil/191-054-085-112.xd-dynamic.algarnetsuper.com.br): 5 in the last 3600 secs \| Nov 11 06:13:24 ns1 sshd[2733067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.54.85.112 user=root Nov 11 06:13:26 ns1 sshd[2733067]: Failed password for root from 191.54.85.112 port 53438 ssh2 Nov 11 06:31:55 ns1 sshd[2741873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191. show less	SSH
🇩🇪 ghostwarriors	2026-11-11 01:50:32 UTC · (4 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇧🇾 lns.bz	2026-11-11 01:32:24 UTC · (4 days ago)	SSH bruteforce [BY]	SSH
🇳🇱 COMPLEX	2026-11-11 01:18:51 UTC · (4 days ago)	Banned by Multi Agent · node …78xl · SSH brute-force / scan	Brute-Force SSH
🇮🇹 alph44	2026-11-10 23:55:54 UTC · (4 days ago)	SSH brute force attack detected: 9 failed attempts	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇦 201.225.79.162

🇬🇧 193.176.29.2

🇫🇷 169.40.142.177

🇺🇸 162.216.150.113

🇺🇸 104.207.41.215

🇳🇱 64.205.72.181

🇳🇱 52.233.193.61

🇺🇸 44.220.188.234

🇮🇩 180.251.157.201

🇳🇱 138.226.239.234

🇨🇳 120.48.56.8

🇭🇰 118.193.45.235

🇫🇷 45.80.27.169

🇸🇬 45.74.17.79

🇺🇸 34.139.110.126

🇨🇳 27.19.153.157

🇺🇸 206.13.105.205

🇲🇦 196.217.174.155

🇳🇱 195.178.110.26

🇳🇱 193.176.31.245