JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.9.125.199

191.9.125.199 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 66%: ?

66%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS26599
Hostname(s)	191-9-125-199.user.vivozap.com.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.9.125.199

Whois 191.9.125.199

IP Abuse Reports for 191.9.125.199:

This IP address has been reported a total of 139 times from 42 distinct sources. 191.9.125.199 was first reported on July 27th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-06-16 06:12:37 (2 days ago)	[06:12] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [06:12] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-06-16 01:05:33 (3 days ago)	[01:05] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [01:05] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-06-14 06:32:27 (4 days ago)	[06:32] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [06:32] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-06-13 08:20:14 (5 days ago)	[08:20] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [08:20] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-06-13 03:59:53 (6 days ago)	[03:59] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ... show more [03:59] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇵🇱 nfsec.pl	2026-06-08 01:41:06 (1 week ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
🇩🇪 Admins@FBN	2026-06-06 15:50:03 (1 week ago)	FW-PortScan: Traffic Blocked srcport=63053 dstport=445	Port Scan
🇺🇸 sumnone	2026-06-04 21:55:43 (2 weeks ago)	Port probing on unauthorized port 445	Port Scan Hacking Exploited Host
🇬🇧 Birdo	2026-06-03 15:37:58 (2 weeks ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-03 12:52:32 (2 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 sthoyer.de	2026-06-02 18:16:31 (2 weeks ago)	Jun 2 20:16:29 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 2 20:16:29 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=191.9.125.199 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=8364 DF PROTO=TCP SPT=62902 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-06-02 18:15:18 (2 weeks ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-06-01 23:52:06 (2 weeks ago)	2026-06-02T00:52:05.639050+01:00 vps kernel: [42098094.208587] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-02T00:52:05.639050+01:00 vps kernel: [42098094.208587] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=191.9.125.199 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x20 TTL=105 ID=29588 DF PROTO=TCP SPT=61556 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 sthoyer.de	2026-05-31 17:08:31 (2 weeks ago)	May 31 19:08:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 31 19:08:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=191.9.125.199 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=20499 DF PROTO=TCP SPT=50316 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 BIV	2026-05-31 12:34:58 (2 weeks ago)	Honeypot multi-source hit. Sources: tpot:Dionaea,tpot:P0f,tpot:Suricata. Ports: 445. Automated tiere ... show more Honeypot multi-source hit. Sources: tpot:Dionaea,tpot:P0f,tpot:Suricata. Ports: 445. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.203

🇳🇱 176.65.132.37

🇬🇧 141.101.98.41

🇨🇳 121.26.65.36

🇹🇭 118.193.56.235

🇱🇹 81.30.98.49

🇷🇴 2.57.121.112

🇬🇧 2a06:4880:a000::ce

🇨🇳 222.128.21.25

🇬🇧 172.68.186.23

🇹🇭 114.131.130.11

🇳🇵 113.199.240.158

🇰🇷 112.167.99.220

🇬🇭 102.223.92.101

🇮🇩 36.67.197.203

🇺🇸 20.168.6.22

🇭🇰 199.45.154.122

🇬🇧 195.206.182.201

🇳🇱 193.176.31.211

🇳🇱 178.16.53.230