This IP address has been reported a total of
133
times from
99 distinct
sources.
144.225.187.161 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-04T16:19:54.048641-05:00 nocix-dedi-bf2421-mci sshd-session[3325012]: Invalid user test from ...
show more2026-07-04T16:19:54.048641-05:00 nocix-dedi-bf2421-mci sshd-session[3325012]: Invalid user test from 144.225.187.161 port 36462
2026-07-04T16:21:29.873128-05:00 nocix-dedi-bf2421-mci sshd-session[3325130]: Invalid user user1 from 144.225.187.161 port 40164
2026-07-04T16:26:10.847007-05:00 nocix-dedi-bf2421-mci sshd-session[3325449]: Invalid user ubuntu from 144.225.187.161 port 33990
...
show less
2026-07-04T18:19:57.640859srgi-dr sshd[1963826]: pam_unix(sshd:auth): authentication failure; lognam ...
show more2026-07-04T18:19:57.640859srgi-dr sshd[1963826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.225.187.161
2026-07-04T18:19:57.635277srgi-dr sshd[1963826]: Invalid user test from 144.225.187.161 port 44968
2026-07-04T18:19:59.821675srgi-dr sshd[1963826]: Failed password for invalid user test from 144.225.187.161 port 44968 ssh2
...
show less
2026-07-05T04:26:23.914435+08:00 localhost sshd-session[571692]: Invalid user testuser from 144.225. ...
show more2026-07-05T04:26:23.914435+08:00 localhost sshd-session[571692]: Invalid user testuser from 144.225.187.161 port 41762
2026-07-05T04:28:24.700286+08:00 localhost sshd-session[572237]: Invalid user frappe from 144.225.187.161 port 43748
2026-07-05T04:30:23.380870+08:00 localhost sshd-session[572784]: Invalid user oracle from 144.225.187.161 port 59976
...
show less
2026-07-04T21:32:04.996546+02:00 gw2.wira-gmbh.de sshd[2686026]: Disconnected from authenticating us ...
show more2026-07-04T21:32:04.996546+02:00 gw2.wira-gmbh.de sshd[2686026]: Disconnected from authenticating user root 144.225.187.161 port 59480 [preauth]
2026-07-04T21:34:15.601062+02:00 gw2.wira-gmbh.de sshd[2686315]: Disconnected from authenticating user root 144.225.187.161 port 48984 [preauth]
2026-07-04T21:35:55.587665+02:00 gw2.wira-gmbh.de sshd[2686520]: Disconnected from authenticating user root 144.225.187.161 port 41080 [preauth]
2026-07-04T21:37:30.966573+02:00 gw2.wira-gmbh.de sshd[2686812]: Disconnected from authenticating user root 144.225.187.161 port 39580 [preauth]
2026-07-04T21:39:15.711695+02:00 gw2.wira-gmbh.de sshd[2687111]: Invalid user test from 144.225.187.161 port 35878
show less
UFW BLOCK Report:
Total attempts: 3
Top ports and details:
- Port 22 (3x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 3
Top ports and details:
- Port 22 (3x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 144.225.187.161
| this report is autogenerated by ZIME Cloud
show less
UFW BLOCK Report:
Total attempts: 10
Top ports and details:
- Port 22 (10x): SSH Brute-Force ( ...
show moreUFW BLOCK Report:
Total attempts: 10
Top ports and details:
- Port 22 (10x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 144.225.187.161
| this report is autogenerated by ZIME Cloud
show less
Jul 4 18:34:14 synth sshd[2969099]: Invalid user magic from 144.225.187.161 port 43286
Jul 4 18:34 ...
show moreJul 4 18:34:14 synth sshd[2969099]: Invalid user magic from 144.225.187.161 port 43286
Jul 4 18:34:14 synth sshd[2969099]: Disconnected from invalid user magic 144.225.187.161 port 43286 [preauth]
Jul 4 18:38:09 synth sshd[2969765]: Invalid user alt from 144.225.187.161 port 42338
Jul 4 18:38:09 synth sshd[2969765]: Disconnected from invalid user alt 144.225.187.161 port 42338 [preauth]
Jul 4 18:40:03 synth sshd[2970122]: Invalid user lille from 144.225.187.161 port 53992
Jul 4 18:40:03 synth sshd[2970122]: Disconnected from invalid user lille 144.225.187.161 port 53992 [preauth]
Jul 4 18:41:51 synth sshd[2970427]: Invalid user db8 from 144.225.187.161 port 43508
Jul 4 18:41:51 synth sshd[2970427]: Disconnected from invalid user db8 144.225.187.161 port 43508 [preauth]
Jul 4 18:43:39 synth sshd[2970740]: Invalid user adminmail from 144.225.187.161 port 38076
Jul 4 18:43:39 synth sshd[2970740]: Disconnected from invalid user adminmail 144.225.187.161 port 38076 [preauth]
...
show less
2026-07-04T20:35:29.879605+02:00 guac-host01.view.srvfarm.net sshd-session[57770]: Invalid user magi ...
show more2026-07-04T20:35:29.879605+02:00 guac-host01.view.srvfarm.net sshd-session[57770]: Invalid user magic from 144.225.187.161 port 34992
2026-07-04T20:35:30.048463+02:00 guac-host01.view.srvfarm.net sshd-session[57770]: Disconnected from invalid user magic 144.225.187.161 port 34992 [preauth]
2026-07-04T20:38:18.795829+02:00 guac-host01.view.srvfarm.net sshd-session[57863]: Invalid user alt from 144.225.187.161 port 55396
2026-07-04T20:38:18.981200+02:00 guac-host01.view.srvfarm.net sshd-session[57863]: Disconnected from invalid user alt 144.225.187.161 port 55396 [preauth]
2026-07-04T20:40:11.959044+02:00 guac-host01.view.srvfarm.net sshd-session[57963]: Invalid user lille from 144.225.187.161 port 44508
show less
Brute-Force
Anonymous
Jul 4 20:36:47 sd-161643 sshd[35620]: Invalid user alt from 144.225.187.161 port 51372
Jul 4 20:36 ...
show moreJul 4 20:36:47 sd-161643 sshd[35620]: Invalid user alt from 144.225.187.161 port 51372
Jul 4 20:36:47 sd-161643 sshd[35620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.225.187.161
Jul 4 20:36:47 sd-161643 sshd[35620]: Invalid user alt from 144.225.187.161 port 51372
Jul 4 20:36:50 sd-161643 sshd[35620]: Failed password for invalid user alt from 144.225.187.161 port 51372 ssh2
Jul 4 20:38:45 sd-161643 sshd[35635]: Invalid user lille from 144.225.187.161 port 38072
...
show less
Brute-Force
SSH
Anonymous
2026-07-04T18:23:06.945450+00:00 de-fra2-matrix1 sshd[4018039]: Invalid user magic from 144.225.187. ...
show more2026-07-04T18:23:06.945450+00:00 de-fra2-matrix1 sshd[4018039]: Invalid user magic from 144.225.187.161 port 57858
2026-07-04T18:36:32.586763+00:00 de-fra2-matrix1 sshd[4018418]: Invalid user alt from 144.225.187.161 port 33640
2026-07-04T18:38:31.308467+00:00 de-fra2-matrix1 sshd[4018443]: Invalid user lille from 144.225.187.161 port 38684
...
show less
2026-07-04T20:36:05.768468+02:00 pietje sshd-session[3645455]: pam_unix(sshd:auth): authentication f ...
show more2026-07-04T20:36:05.768468+02:00 pietje sshd-session[3645455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.225.187.161
2026-07-04T20:36:08.283644+02:00 pietje sshd-session[3645455]: Failed password for invalid user magic from 144.225.187.161 port 47514 ssh2
2026-07-04T20:36:09.682749+02:00 pietje sshd-session[3645455]: Disconnected from invalid user magic 144.225.187.161 port 47514 [preauth]
...
show less
2026-07-04T17:52:02.040728+00:00 prod-westeu sshd[3104981]: Failed password for root from 144.225.18 ...
show more2026-07-04T17:52:02.040728+00:00 prod-westeu sshd[3104981]: Failed password for root from 144.225.187.161 port 47508 ssh2
2026-07-04T17:53:47.137599+00:00 prod-westeu sshd[3105518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.225.187.161 user=root
2026-07-04T17:53:49.466223+00:00 prod-westeu sshd[3105518]: Failed password for root from 144.225.187.161 port 42944 ssh2
...
show less
2026-07-04T16:04:56.464412+00:00 schulze-versmar.de sshd-session[65500]: Invalid user netapp from 14 ...
show more2026-07-04T16:04:56.464412+00:00 schulze-versmar.de sshd-session[65500]: Invalid user netapp from 144.225.187.161 port 41486
2026-07-04T16:09:35.406590+00:00 schulze-versmar.de sshd-session[65575]: Invalid user focus from 144.225.187.161 port 53894
2026-07-04T16:11:22.123863+00:00 schulze-versmar.de sshd-session[65582]: Invalid user designer from 144.225.187.161 port 51380
...
show less
Hacking
SSH
Showing 1 to
15
of 133 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩