JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.8.215.208

Neutral Activity

Abuse Confidence Score

0% Low Risk

81 reports

51 reporters · latest 2 years ago

ISP: TELEFÔNICA BRASIL S.A
Usage Type: Fixed Line ISP
ASN: AS26599
Hostname(s): 191-8-215-208.user.vivozap.com.br
Domain Name: telefonica.com.br
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

191.8.215.208 has been reported 81 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

81 from 51 distinct reporters

First reported

August 2nd 2023

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 08:57:47 UTC · (2 years ago)	Unauthorized connection attempt	Brute-Force
🇩🇪 Shivakumar Gurumurthy	2023-08-12 18:31:57 UTC · (3 years ago)	2023-08-05 15:56:59,384 fail2ban.actions [336505]: NOTICE [sshd] Ban 191.8.215.208 2023-08-05 15:56:59,384 fail2ban.actions [336505]: NOTICE [sshd] Ban 191.8.215.208 2023-08-05 15:56:59,384 fail2ban.actions [336505]: NOTICE [s ... show more 2023-08-05 15:56:59,384 fail2ban.actions [336505]: NOTICE [sshd] Ban 191.8.215.208 2023-08-05 15:56:59,384 fail2ban.actions [336505]: NOTICE [sshd] Ban 191.8.215.208 2023-08-05 15:56:59,384 fail2ban.actions [336505]: NOTICE [sshd] Ban 191.8.215.208 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-08-05 22:04:43 UTC · (3 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/191.8.215.208	Brute-Force
🇩🇪 corthorn	2023-08-05 11:50:57 UTC · (3 years ago)	Aug 5 13:50:55 vmi1008219 sshd[1456277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 13:50:57 vmi1008219 sshd[1456277]: Failed password for root from 191.8.215.208 port 5836 ... show more Aug 5 13:50:55 vmi1008219 sshd[1456277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 13:50:57 vmi1008219 sshd[1456277]: Failed password for root from 191.8.215.208 port 58362 ssh2 ... show less	Brute-Force SSH
🇩🇪 corthorn	2023-08-05 11:09:05 UTC · (3 years ago)	Aug 5 13:09:02 vmi1008219 sshd[1453847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 13:09:04 vmi1008219 sshd[1453847]: Failed password for root from 191.8.215.208 port 4254 ... show more Aug 5 13:09:02 vmi1008219 sshd[1453847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 13:09:04 vmi1008219 sshd[1453847]: Failed password for root from 191.8.215.208 port 42544 ssh2 ... show less	Brute-Force SSH
🇩🇪 LoNET	2023-08-05 10:08:25 UTC · (3 years ago)	Report 610883 with IP 1656875 for SSH brute-force attack by source 1653108 via ssh-honeypot/0.2.0+http	Brute-Force SSH
Anonymous	2023-08-05 10:02:31 UTC · (3 years ago)	Aug 5 10:02:30 f2b auth.info sshd[1106346]: Invalid user zrr from 191.8.215.208 port 58054 Aug 5 10:02:30 f2b auth.info sshd[1106346]: Failed password for invalid user zrr from 191.8.215.208 port 58054 ssh2 Aug 5 10:02:31 f2b auth.info sshd[110634 ... show more Aug 5 10:02:30 f2b auth.info sshd[1106346]: Invalid user zrr from 191.8.215.208 port 58054 Aug 5 10:02:30 f2b auth.info sshd[1106346]: Failed password for invalid user zrr from 191.8.215.208 port 58054 ssh2 Aug 5 10:02:31 f2b auth.info sshd[1106346]: Disconnected from invalid user zrr 191.8.215.208 port 58054 [preauth] ... show less	Brute-Force SSH
🇳🇱 djordykoert.nl	2023-08-05 09:13:42 UTC · (3 years ago)	Aug 5 11:01:26 debian-djordy sshd[292947]: Invalid user ftptest from 191.8.215.208 port 44330 Aug 5 11:13:41 debian-djordy sshd[296572]: Invalid user pauline from 191.8.215.208 port 38408 ...	Brute-Force SSH
🇩🇪 Sysadmin Peter	2023-08-05 09:06:19 UTC · (3 years ago)	Aug 5 11:06:18 mail sshd[1198605]: Invalid user vishal from 191.8.215.208 port 40548 ...	Brute-Force SSH
🇩🇪 Sysadmin Peter	2023-08-05 08:47:41 UTC · (3 years ago)	Aug 5 10:47:40 mail sshd[1198365]: Invalid user administrator from 191.8.215.208 port 38108 ...	Brute-Force SSH
🇩🇪 aramosf	2023-08-05 07:02:01 UTC · (3 years ago)	Aug 5 08:58:04 cloudplex sshd[461239]: Failed password for root from 191.8.215.208 port 38514 ssh2 Aug 5 09:00:06 cloudplex sshd[461278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=ro ... show more Aug 5 08:58:04 cloudplex sshd[461239]: Failed password for root from 191.8.215.208 port 38514 ssh2 Aug 5 09:00:06 cloudplex sshd[461278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 09:00:08 cloudplex sshd[461278]: Failed password for root from 191.8.215.208 port 32792 ssh2 Aug 5 09:01:59 cloudplex sshd[461310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 09:02:01 cloudplex sshd[461310]: Failed password for root from 191.8.215.208 port 55298 ssh2 ... show less	Brute-Force SSH
🇩🇪 Antti	2023-08-05 06:49:23 UTC · (3 years ago)	2023-08-05T06:45:36.112014+00:00 melon sshd[1083566]: User root from 191.8.215.208 not allowed because none of user's groups are listed in AllowGroups 2023-08-05T06:47:35.456758+00:00 melon sshd[1085438]: Connection from 191.8.215.208 port 39324 on 6 ... show more 2023-08-05T06:45:36.112014+00:00 melon sshd[1083566]: User root from 191.8.215.208 not allowed because none of user's groups are listed in AllowGroups 2023-08-05T06:47:35.456758+00:00 melon sshd[1085438]: Connection from 191.8.215.208 port 39324 on 65.108.201.187 port 22 rdomain "" 2023-08-05T06:47:36.744426+00:00 melon sshd[1085438]: User root from 191.8.215.208 not allowed because none of user's groups are listed in AllowGroups 2023-08-05T06:49:21.483930+00:00 melon sshd[1086814]: Connection from 191.8.215.208 port 33596 on 65.108.201.187 port 22 rdomain "" 2023-08-05T06:49:22.776723+00:00 melon sshd[1086814]: User root from 191.8.215.208 not allowed because none of user's groups are listed in AllowGroups show less	Brute-Force SSH
🇧🇬 MazenHost	2023-08-05 05:49:23 UTC · (3 years ago)	Aug 5 07:47:35 Dev sshd[2173521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 07:47:37 Dev sshd[2173521]: Failed password for root from 191.8.215.208 port 46532 ssh2 Aug 5 ... show more Aug 5 07:47:35 Dev sshd[2173521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 07:47:37 Dev sshd[2173521]: Failed password for root from 191.8.215.208 port 46532 ssh2 Aug 5 07:49:20 Dev sshd[2173549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 user=root Aug 5 07:49:22 Dev sshd[2173549]: Failed password for root from 191.8.215.208 port 38866 ssh2 ... show less	Brute-Force SSH
🇩🇪 aramosf	2023-08-05 04:11:42 UTC · (3 years ago)	Aug 5 06:09:55 cloudplex sshd[360156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 Aug 5 06:09:57 cloudplex sshd[360156]: Failed password for invalid user postgres from 191.8.215.208 port 4 ... show more Aug 5 06:09:55 cloudplex sshd[360156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 Aug 5 06:09:57 cloudplex sshd[360156]: Failed password for invalid user postgres from 191.8.215.208 port 44740 ssh2 Aug 5 06:11:39 cloudplex sshd[360171]: Invalid user cals_oit_ssh from 191.8.215.208 port 37672 Aug 5 06:11:39 cloudplex sshd[360171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 Aug 5 06:11:41 cloudplex sshd[360171]: Failed password for invalid user cals_oit_ssh from 191.8.215.208 port 37672 ssh2 ... show less	Brute-Force SSH
🇩🇪 aramosf	2023-08-05 03:55:35 UTC · (3 years ago)	Aug 5 05:52:14 cloudplex sshd[359964]: Failed password for invalid user test from 191.8.215.208 port 58922 ssh2 Aug 5 05:53:50 cloudplex sshd[359971]: Invalid user elemental from 191.8.215.208 port 51856 Aug 5 05:53:50 cloudplex sshd[359971]: pam_ ... show more Aug 5 05:52:14 cloudplex sshd[359964]: Failed password for invalid user test from 191.8.215.208 port 58922 ssh2 Aug 5 05:53:50 cloudplex sshd[359971]: Invalid user elemental from 191.8.215.208 port 51856 Aug 5 05:53:50 cloudplex sshd[359971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.215.208 Aug 5 05:53:52 cloudplex sshd[359971]: Failed password for invalid user elemental from 191.8.215.208 port 51856 ssh2 Aug 5 05:55:34 cloudplex sshd[359981]: Invalid user hkohesta from 191.8.215.208 port 44792 ... show less	Brute-Force SSH

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 176.131.12.147

🇵🇱 151.115.60.7

🇩🇪 69.5.169.136

🇺🇸 24.47.25.245

🇳🇵 2404:7c00:63:d2e3:7d29:e166:60af:53cd

🇺🇸 216.25.90.7

🇩🇪 213.209.159.133

🇮🇳 203.190.153.90

🇪🇸 195.211.168.97

🇻🇪 190.142.223.169

🇺🇸 172.252.238.162

🇺🇸 172.252.228.101

🇺🇸 172.252.46.24

🇫🇷 155.117.5.231

🇨🇦 138.197.162.116

🇰🇿 92.55.171.15

🇲🇩 89.149.90.131

🇧🇬 79.124.58.102

🇧🇬 79.124.56.222

🇩🇪 43.228.157.82