JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.107.18.24

143.107.18.24 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 53%: ?

53%

ISP	UNIVERSIDADE DE SAO PAULO
Usage Type	University/College/School
ASN	AS28571
Hostname(s)	m24.iag.usp.br
Domain Name	usp.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.107.18.24

Whois 143.107.18.24

IP Abuse Reports for 143.107.18.24:

This IP address has been reported a total of 110 times from 78 distinct sources. 143.107.18.24 was first reported on April 25th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-17 15:36:35 (2 days ago)	ICS Labs identified 143.107.18.24 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇨🇦 SSH-Admin	2026-05-14 01:19:04 (1 month ago)	Failed password for invalid user via ssh	Brute-Force SSH
🇱🇺 SiteXL	2026-04-29 11:12:01 (1 month ago)	{"event":{"DateTime":"2026-04-27T11:10:04Z","RemoteAddr":"143.107.18.24:36744","Protocol":"SSH","Com ... show more {"event":{"DateTime":"2026-04-27T11:10:04Z","RemoteAddr":"143.107.18.24:36744","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"ea3550e9-e609-40ef-9b69-e24ceedba5f5","Environ":"","User":"root","Password":"Q123456","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"143.107.18.24","SourcePort":"36744","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-04-27T11:11:12Z","RemoteAddr":"143.107.18.24:58844","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"a3f5d96b-5be3-4315-b556-09757caf16c9","Environ":"","User":"root","Password":"`!qaz@wsx","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","D show less	Hacking Port Scan Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-04-28 22:31:34 (1 month ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-28 01:03:30 (1 month ago)	ThreatBook Intelligence: Edu more details on http://threatbook.io/ip/143.107.18.24	SSH
🇺🇸 PlusReed	2026-04-27 14:02:59 (1 month ago)	Apr 27 10:01:46 plusreed sshd[17069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Apr 27 10:01:46 plusreed sshd[17069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 10:01:48 plusreed sshd[17069]: Failed password for root from 143.107.18.24 port 56448 ssh2 Apr 27 10:02:57 plusreed sshd[17335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 10:02:59 plusreed sshd[17335]: Failed password for root from 143.107.18.24 port 58930 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-27 13:49:31 (1 month ago)	2026-04-27T15:44:06.041945+02:00 router02.imr-richtsfeld.de sshd[2655713]: Disconnected from authent ... show more 2026-04-27T15:44:06.041945+02:00 router02.imr-richtsfeld.de sshd[2655713]: Disconnected from authenticating user root 143.107.18.24 port 38818 [preauth] 2026-04-27T15:45:24.307472+02:00 router02.imr-richtsfeld.de sshd[2656382]: Disconnected from authenticating user root 143.107.18.24 port 41112 [preauth] 2026-04-27T15:46:40.504982+02:00 router02.imr-richtsfeld.de sshd[2656978]: Disconnected from authenticating user root 143.107.18.24 port 59042 [preauth] 2026-04-27T15:48:18.758057+02:00 router02.imr-richtsfeld.de sshd[2657784]: Disconnected from authenticating user root 143.107.18.24 port 49026 [preauth] 2026-04-27T15:49:31.170644+02:00 router02.imr-richtsfeld.de sshd[2658346]: Disconnected from authenticating user root 143.107.18.24 port 45292 [preauth] show less	Brute-Force
🇺🇸 PlusReed	2026-04-27 13:45:59 (1 month ago)	Apr 27 09:37:42 plusreed sshd[10597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Apr 27 09:37:42 plusreed sshd[10597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 09:37:44 plusreed sshd[10597]: Failed password for root from 143.107.18.24 port 60988 ssh2 Apr 27 09:44:36 plusreed sshd[12565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 09:44:38 plusreed sshd[12565]: Failed password for root from 143.107.18.24 port 59026 ssh2 Apr 27 09:45:55 plusreed sshd[12892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 09:45:57 plusreed sshd[12892]: Failed password for root from 143.107.18.24 port 57530 ssh2 ... show less	Brute-Force SSH
🇺🇸 NeverBehave	2026-04-27 13:11:14 (1 month ago)	[fail2ban] service sshd jail	Brute-Force SSH
🇺🇸 Cheddar	2026-04-27 13:04:07 (1 month ago)	2026-04-27T13:02:49.508510+00:00 us-lax-node1121 sshd-session[851179]: Failed password for root from ... show more 2026-04-27T13:02:49.508510+00:00 us-lax-node1121 sshd-session[851179]: Failed password for root from 143.107.18.24 port 41660 ssh2 2026-04-27T13:04:04.971012+00:00 us-lax-node1121 sshd-session[851347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root 2026-04-27T13:04:07.500035+00:00 us-lax-node1121 sshd-session[851347]: Failed password for root from 143.107.18.24 port 34004 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-27 12:58:04 (1 month ago)	143.107.18.24 (BR/Brazil/m24.iag.usp.br), 5 distributed sshd attacks on account [root] in the last 3 ... show more 143.107.18.24 (BR/Brazil/m24.iag.usp.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 27 12:50:45 24569 sshd[14052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.37.98.163 user=root Apr 27 12:50:46 24569 sshd[14052]: Failed password for root from 177.37.98.163 port 22411 ssh2 Apr 27 12:57:41 24569 sshd[14519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.210.236.46 user=root Apr 27 12:48:21 24569 sshd[13902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 12:48:23 24569 sshd[13902]: Failed password for root from 143.107.18.24 port 57556 ssh2 IP Addresses Blocked: 177.37.98.163 (BR/Brazil/177.37.98.163.indanet.com.br) 103.210.236.46 (HK/Hong Kong/-) show less	Brute-Force SSH
🇺🇸 SANYALnet Labs	2026-04-27 12:49:09 (1 month ago)	Apr 27 12:49:04 hecnet-us-east-gw sshd[153552]: pam_unix(sshd:auth): authentication failure; logname ... show more Apr 27 12:49:04 hecnet-us-east-gw sshd[153552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 12:49:06 hecnet-us-east-gw sshd[153552]: Failed password for invalid user root from 143.107.18.24 port 52494 ssh2 Apr 27 12:49:08 hecnet-us-east-gw sshd[153552]: Disconnected from invalid user root 143.107.18.24 port 52494 [preauth] ... show less	Brute-Force
🇬🇧 mateisr	2026-04-27 12:23:51 (1 month ago)	\(@\) Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
Anonymous	2026-04-27 12:21:39 (1 month ago)	Apr 27 20:11:15 mail sshd[27060]: Failed password for root from 143.107.18.24 port 40600 ssh2	Brute-Force SSH
🇺🇸 shaunc	2026-04-27 12:21:09 (1 month ago)	Apr 27 07:04:31 [redacted] sshd[18650]: Disconnected from 143.107.18.24 port 39092 [preauth] Apr 27 ... show more Apr 27 07:04:31 [redacted] sshd[18650]: Disconnected from 143.107.18.24 port 39092 [preauth] Apr 27 07:21:06 [redacted] sshd[19039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.18.24 user=root Apr 27 07:21:07 [redacted] sshd[19039]: Failed password for root from 143.107.18.24 port 55660 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.112.47.54

🇦🇷 190.244.39.224

🇵🇰 175.107.233.84

🇺🇸 138.122.193.253

🇱🇰 123.231.14.147

🇮🇳 117.192.198.196

🇫🇷 82.102.18.116

🇺🇸 34.224.9.144

🇧🇷 20.206.64.115

🇰🇷 220.80.66.168

🇨🇳 183.206.33.20

🇨🇳 182.43.76.81

🇸🇬 118.194.235.16

🇸🇬 101.47.156.170

🇫🇷 91.231.89.77

🇫🇷 85.217.140.40

🇰🇷 59.26.193.177

🇺🇸 50.46.141.125

🇺🇸 20.163.15.124

🇧🇪 198.235.24.131