187.20.49.249

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
7% Caution
14 reports
7 reporters · latest 1 month ago
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Hostname(s)
bb1431f9.virtua.com.br
Domain Name
claro.com.br
Country
🇧🇷 Brazil
City
Belo Horizonte, Minas Gerais
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 7 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇮🇹 Italy 1
Most common categories Port Scan 2 Hacking 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a non-approved destination port. destination port 49473.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 14590.
Port Scan Hacking
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
Anonymous
denied traffic to a honeypot network. destination port 3389.
Port Scan Hacking
🇺🇸 MPL
tcp/443 (7 or more attempts)
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 51981.
Port Scan
🇷🇴 abuse_IP_reporter
Jul 30 18:02:12 server UFW BLOCK SRC=187.20.49.249 DF PROTO=TCP SPT=32856
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 22794.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 62599.
Port Scan Hacking
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇩🇪 SMARTNET
Aisuru(Mirai variant) DDoS | Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952
DDoS Attack
🇺🇸 quilla
Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)
DDoS Attack
Anonymous
scanning http requests from known botnet
Web App Attack
Anonymous
scanning http requests from known botnet
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 57.141.0.50
🇭🇺 45.9.168.92
🇻🇳 103.69.96.120
🇷🇺 95.189.34.214
🇺🇸 65.49.1.196
🇺🇸 52.201.182.91
🇳🇱 45.148.10.141
🇺🇸 45.8.19.62
🇲🇽 187.190.35.163
🇩🇪 162.158.94.18
🇺🇸 136.71.158.90
🇷🇴 80.94.92.179
🇸🇬 47.128.30.95
🇺🇸 45.8.19.43
🇺🇸 45.8.19.41
🇧🇷 200.196.131.233
feedback