JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

187.44.225.242

Neutral Activity

Abuse Confidence Score

0% Low Risk

3,693 reports

746 reporters · latest 1 year ago

ISP: ITS TELECOMUNICACOES LTDA
Usage Type: Fixed Line ISP
ASN: AS28186
Domain Name: itsweb.com.br
Country: 🇧🇷 Brazil
City: Salvador, Bahia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

187.44.225.242 has been reported 3,693 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

3,693 from 746 distinct reporters

First reported

October 23rd 2022

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 exxos	2025-09-01 18:03:01 UTC · (1 year ago)	http-no-verb	Hacking
Anonymous	2023-11-30 00:47:14 UTC · (2 years ago)	$f2bV_matches	Brute-Force SSH
🇫🇷 JA	2023-07-12 14:00:37 UTC · (3 years ago)	ssh login attempt	Brute-Force SSH
🇬🇧 FreeSTAR	2023-03-03 11:53:42 UTC · (3 years ago)	Feb 19 11:52:44 DVSwitch-GM0WUR sshd[2535]: Failed password for root from 187.44.225.242 port 43392 ssh2 ...	Brute-Force SSH
🇮🇳 Parth Maniar	2023-03-01 11:21:33 UTC · (3 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-02-22 23:24:59 UTC · (3 years ago)	ThreatBook Intelligence: VPN,Brute Force more details on https://threatbook.io/ip/187.44.225.242	Brute-Force
🇩🇪 MrIPBreaker	2023-02-22 18:31:21 UTC · (3 years ago)	Feb 22 19:25:15 vmd80284 sshd[864986]: Invalid user admin from 187.44.225.242 port 55510 Feb 22 19:29:50 vmd80284 sshd[866075]: Invalid user ubuntu from 187.44.225.242 port 50644 Feb 22 19:31:21 vmd80284 sshd[866412]: Invalid user testuser from 187.4 ... show more Feb 22 19:25:15 vmd80284 sshd[864986]: Invalid user admin from 187.44.225.242 port 55510 Feb 22 19:29:50 vmd80284 sshd[866075]: Invalid user ubuntu from 187.44.225.242 port 50644 Feb 22 19:31:21 vmd80284 sshd[866412]: Invalid user testuser from 187.44.225.242 port 49020 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2023-02-22 18:27:48 UTC · (3 years ago)	Feb 22 19:20:22 web01.agentur-b-2.de sshd[53581]: Disconnected from authenticating user root 187.44.225.242 port 51840 [preauth] Feb 22 19:24:41 web01.agentur-b-2.de sshd[54934]: Invalid user admin from 187.44.225.242 port 39468 Feb 22 19:24:41 web01 ... show more Feb 22 19:20:22 web01.agentur-b-2.de sshd[53581]: Disconnected from authenticating user root 187.44.225.242 port 51840 [preauth] Feb 22 19:24:41 web01.agentur-b-2.de sshd[54934]: Invalid user admin from 187.44.225.242 port 39468 Feb 22 19:24:41 web01.agentur-b-2.de sshd[54934]: Disconnected from invalid user admin 187.44.225.242 port 39468 [preauth] Feb 22 19:26:16 web01.agentur-b-2.de sshd[55597]: Disconnected from authenticating user root 187.44.225.242 port 37846 [preauth] Feb 22 19:27:47 web01.agentur-b-2.de sshd[55998]: Disconnected from authenticating user root 187.44.225.242 port 36224 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-02-22 18:27:48 UTC · (3 years ago)	Feb 22 19:20:22 web01.agentur-b-2.de sshd[53581]: Disconnected from authenticating user root 187.44.225.242 port 51840 [preauth] Feb 22 19:24:41 web01.agentur-b-2.de sshd[54934]: Invalid user admin from 187.44.225.242 port 39468 Feb 22 19:24:41 web01 ... show more Feb 22 19:20:22 web01.agentur-b-2.de sshd[53581]: Disconnected from authenticating user root 187.44.225.242 port 51840 [preauth] Feb 22 19:24:41 web01.agentur-b-2.de sshd[54934]: Invalid user admin from 187.44.225.242 port 39468 Feb 22 19:24:41 web01.agentur-b-2.de sshd[54934]: Disconnected from invalid user admin 187.44.225.242 port 39468 [preauth] Feb 22 19:26:16 web01.agentur-b-2.de sshd[55597]: Disconnected from authenticating user root 187.44.225.242 port 37846 [preauth] Feb 22 19:27:47 web01.agentur-b-2.de sshd[55998]: Disconnected from authenticating user root 187.44.225.242 port 36224 [preauth] show less	Brute-Force
🇯🇵 zwh	2023-02-22 18:21:56 UTC · (3 years ago)	SSH Brute-Force	Brute-Force SSH
Anonymous	2023-02-22 17:17:21 UTC · (3 years ago)	(sshd) Failed SSH login from 187.44.225.242 (BR/Brazil/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Feb 22 12:12:07 server4 sshd[9096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ... show more (sshd) Failed SSH login from 187.44.225.242 (BR/Brazil/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Feb 22 12:12:07 server4 sshd[9096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.225.242 user=root Feb 22 12:12:08 server4 sshd[9096]: Failed password for root from 187.44.225.242 port 35470 ssh2 Feb 22 12:15:32 server4 sshd[10296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.225.242 user=root Feb 22 12:15:35 server4 sshd[10296]: Failed password for root from 187.44.225.242 port 50518 ssh2 Feb 22 12:17:16 server4 sshd[10854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.225.242 user=root show less	Brute-Force
🇩🇪 alps.one	2023-02-22 16:29:16 UTC · (3 years ago)		Brute-Force SSH
🇺🇸 MU-star.net	2023-02-22 15:47:19 UTC · (3 years ago)	Invalid user steam from 187.44.225.242 port 47814	Port Scan Brute-Force SSH
🇺🇸 MU-star.net	2023-02-22 15:47:19 UTC · (3 years ago)	Invalid user steam from 187.44.225.242 port 47814	Port Scan Brute-Force SSH
🇺🇸 MU-star.net	2023-02-22 15:47:19 UTC · (3 years ago)	Invalid user steam from 187.44.225.242 port 47814	Port Scan Brute-Force SSH

Showing 1 to 15 of 3693 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇴 185.12.59.118

🇵🇭 136.158.7.122

🇧🇩 103.148.108.83

🇺🇸 66.228.53.4

🇺🇸 207.90.244.19

🇬🇧 193.163.125.138

🇨🇳 182.119.228.155

🇮🇳 182.95.228.194

🇵🇱 176.53.159.197

🇹🇼 124.9.95.37

🇵🇰 110.38.8.30

🇨🇳 106.52.119.44

🇮🇩 103.52.115.189

🇺🇸 73.85.44.247

🇮🇶 62.201.228.210

🇳🇱 45.148.10.151

🇺🇸 43.166.178.124

🇨🇳 42.240.164.208

🇺🇸 34.204.53.128

🇳🇱 34.3.85.94