This IP address has been reported a total of
93
times from
80 distinct
sources.
187.74.4.162 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 28
reports;
United States of America
with 20
reports;
France
with 6
reports.
The most common categories in these recent reports were:
SSH
87
times;
Brute-Force
84
times;
Port Scan
4
times;
Web App Attack
3
times;
Bad Web Bot
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 272 port scanning attempts on 01-10-2026. For more information or to rep ...
show moreThis IP address carried out 272 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 43 SSH credential attack (attempts) on 01-10-2026. For more information ...
show moreThis IP address carried out 43 SSH credential attack (attempts) on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Cowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts fr ...
show moreCowrie SSH honeypot detected unauthorized SSH activity. Username: root. Failed SSH login attempts from this IP in the last 24 hours: 6. New failed login attempts since the previous report: 5. Reason: Failed SSH login attempt. Target: SSH honeypot.
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 15/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 15/100 (low) | Phase: reconnaissance (low-volume probing)
Failed auth: 6 (0 bad password, 6 invalid user) | 0 success | 12 total SSH log events | seen on 1 sensor(s)
Origin: Brazil (BR) | AS27699 TELEFÔNICA BRASIL S.A | 187.74.4.0/24
First seen: 2026-10-01 13:08:15 UTC | Last seen: 2026-10-01 13:17:53 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Oct 1 15:08:43 vps2 sshd[2619603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreOct 1 15:08:43 vps2 sshd[2619603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.74.4.162
Oct 1 15:08:45 vps2 sshd[2619603]: Failed password for invalid user linuxacademy from 187.74.4.162 port 46372 ssh2
Oct 1 15:16:03 vps2 sshd[2621538]: Invalid user git from 187.74.4.162 port 49296
...
show less
Cowrie SSH honeypot detected unauthorized SSH activity. Username: linuxacademy. Failed SSH login att ...
show moreCowrie SSH honeypot detected unauthorized SSH activity. Username: linuxacademy. Failed SSH login attempts from this IP in the last 24 hours: 1. New failed login attempts since the previous report: 1. Reason: Failed SSH login attempt. Target: SSH honeypot.
show less
2026-10-01T10:13:59.302657mail.rootshell.is sshd[15644]: Invalid user tester from 187.74.4.162 port ...
show more2026-10-01T10:13:59.302657mail.rootshell.is sshd[15644]: Invalid user tester from 187.74.4.162 port 53280
2026-10-01T10:15:45.109952mail.rootshell.is sshd[15711]: Invalid user student from 187.74.4.162 port 55268
2026-10-01T10:20:40.624013mail.rootshell.is sshd[15806]: Invalid user consulta from 187.74.4.162 port 32974
...
show less
