168.90.167.42

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
23% Elevated
15 reports
12 reporters · latest 1 week ago
ISP
REDE CONNECT TELECOMUNICACOES LTDA
Usage Type
Fixed Line ISP
ASN
AS53005
Domain Name
connectba.com.br
Country
🇧🇷 Brazil
City
Candido Sales, Bahia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 3 🇧🇷 Brazil 1 🇩🇪 Germany 1
Most common categories Port Scan 7 Brute-Force 2 Exploited Host 1 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 maxxsense
168.90.167.42 (BR/Brazil/as53005.ba.connectba.com.br), 12 distributed imapd attacks on account [redacted]
Brute-Force
Anonymous
denied traffic to a non-approved destination port. destination port 27766.
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇭🇰 CyberFox
53597/udp (1 or more attempts)
Port Scan
Anonymous
28530/udp (1 or more attempts)
Port Scan
🇭🇰 CyberFox
7506/udp (1 or more attempts)
Port Scan
🇳🇮 elfita
Blocked by nftables on AmneziaWG gateway
Port Scan Brute-Force Exploited Host
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 55451.
Port Scan Hacking
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇩🇪 SMARTNET
Aisuru(Mirai variant) DDoS | Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61
DDoS Attack
🇦🇺 Telemetry2U.com
SQL Injection attempt detected
Web App Attack SQL Injection
🇩🇪 Pingger Shikkoken
Participating in DDoS Amplification Attack! Sending 20 requests over 14301s asking for ?0? of apple.com, cisco.com, atlassian.com
DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 212.192.136.6
🇻🇳 165.99.16.17
🇮🇳 128.185.33.227
🇺🇸 52.248.43.85
🇵🇱 194.180.49.38
🇺🇸 184.105.139.67
🇵🇱 172.64.198.40
🇮🇳 152.59.79.12
🇺🇸 151.241.122.119
🇺🇸 130.17.155.247
🇺🇸 65.49.1.237
🇰🇷 175.206.1.60
🇹🇼 124.219.31.130
🇰🇷 118.37.214.187
🇨🇳 117.62.235.52
🇨🇳 111.30.42.43
🇫🇷 103.110.163.79
🇺🇸 69.115.134.33
🇳🇱 45.148.10.152
🇺🇸 100.28.153.226
feedback