JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.4.4.85

189.4.4.85 was found in our database!

This IP was reported 8,473 times. Confidence of Abuse is 31%: ?

31%

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Hostname(s)	bd040455.virtua.com.br
Domain Name	claro.com.br
Country	🇧🇷 Brazil
City	Araucaria, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.4.4.85

Whois 189.4.4.85

IP Abuse Reports for 189.4.4.85:

This IP address has been reported a total of 8,473 times from 1,367 distinct sources. 189.4.4.85 was first reported on December 19th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 jonathanselea.se	2026-05-13 07:47:48 (3 weeks ago)	$f2bV_matches	SSH
🇧🇾 lns.bz	2026-05-12 12:17:39 (3 weeks ago)	SSH bruteforce [BY]	SSH
🇬🇧 thetomtaylor.co.uk	2026-05-05 19:08:22 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02,mx03]	Brute-Force SSH
🇫🇮 hieronymousch	2026-04-25 15:03:57 (1 month ago)	2026-04-25T14:53:33.475844+00:00 netbird.franssen.xyz sshd-session[1260294]: Failed password for inv ... show more 2026-04-25T14:53:33.475844+00:00 netbird.franssen.xyz sshd-session[1260294]: Failed password for invalid user deploy from 189.4.4.85 port 4522 ssh2 2026-04-25T14:58:47.260243+00:00 netbird.franssen.xyz sshd-session[1261687]: Invalid user sysadmin from 189.4.4.85 port 62091 2026-04-25T14:58:47.267456+00:00 netbird.franssen.xyz sshd-session[1261687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85 2026-04-25T14:58:49.672022+00:00 netbird.franssen.xyz sshd-session[1261687]: Failed password for invalid user sysadmin from 189.4.4.85 port 62091 ssh2 2026-04-25T15:03:56.308007+00:00 netbird.franssen.xyz sshd-session[1263062]: Invalid user seekcy from 189.4.4.85 port 32551 ... show less	Brute-Force SSH
🇫🇮 hieronymousch	2026-04-25 14:43:08 (1 month ago)	2026-04-25T14:32:36.314319+00:00 netbird.franssen.xyz sshd-session[1254843]: Failed password for inv ... show more 2026-04-25T14:32:36.314319+00:00 netbird.franssen.xyz sshd-session[1254843]: Failed password for invalid user ali from 189.4.4.85 port 28110 ssh2 2026-04-25T14:37:53.464704+00:00 netbird.franssen.xyz sshd-session[1256204]: Invalid user bot from 189.4.4.85 port 37873 2026-04-25T14:37:53.470766+00:00 netbird.franssen.xyz sshd-session[1256204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85 2026-04-25T14:37:55.250974+00:00 netbird.franssen.xyz sshd-session[1256204]: Failed password for invalid user bot from 189.4.4.85 port 37873 ssh2 2026-04-25T14:43:07.463906+00:00 netbird.franssen.xyz sshd-session[1257608]: Invalid user ftp-user from 189.4.4.85 port 40031 ... show less	Brute-Force SSH
🇺🇸 wlt-blocker	2026-04-25 14:41:34 (1 month ago)	Attempts to access SSH server with wrong credentials	SSH
🇨🇿 lp	2026-04-25 12:18:50 (1 month ago)	SSH Brute force: 1 attempts were recorded from 189.4.4.85 2026-04-25T14:09:46+02:00 Invalid user dep ... show more SSH Brute force: 1 attempts were recorded from 189.4.4.85 2026-04-25T14:09:46+02:00 Invalid user deploy from 189.4.4.85 port 28354 show less	Brute-Force SSH
🇺🇸 entangled_mongoose	2026-04-25 12:05:22 (1 month ago)	Attempted login with username deploy.	SSH Brute-Force
🇵🇱 Wepted	2026-04-25 11:19:26 (1 month ago)	2026-04-25T13:09:05.891704+02:00 axisverse sshd-session[1180316]: Invalid user server from 189.4.4.8 ... show more 2026-04-25T13:09:05.891704+02:00 axisverse sshd-session[1180316]: Invalid user server from 189.4.4.85 port 9571 2026-04-25T13:14:15.886166+02:00 axisverse sshd-session[1189644]: Invalid user service from 189.4.4.85 port 58874 2026-04-25T13:19:25.933776+02:00 axisverse sshd-session[1198855]: Invalid user test from 189.4.4.85 port 23110 ... show less	Brute-Force SSH
🇮🇹 alph44	2026-04-25 11:12:54 (1 month ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇮🇹 alph44	2026-04-25 10:00:42 (1 month ago)	SSH brute force attack detected: 6 failed attempts	Brute-Force
Anonymous	2026-04-25 09:53:03 (1 month ago)	189.4.4.85 (BR/Brazil/bd040455.virtua.com.br), 5 distributed sshd attacks on account [root] in the l ... show more 189.4.4.85 (BR/Brazil/bd040455.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Apr 25 19:48:08 syd2 sshd[1819277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.78.92 user=root Apr 25 19:49:17 syd2 sshd[1819365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85 user=root Apr 25 19:49:19 syd2 sshd[1819365]: Failed password for root from 189.4.4.85 port 2108 ssh2 Apr 25 19:48:10 syd2 sshd[1819277]: Failed password for root from 45.116.78.92 port 35210 ssh2 Apr 25 19:52:55 syd2 sshd[1819623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.220.172.154 user=root IP Addresses Blocked: 45.116.78.92 (HK/Hong Kong/-) show less	Port Scan
🇺🇸 bigscoots.com	2026-04-25 09:51:11 (1 month ago)	189.4.4.85 (BR/Brazil/bd040455.virtua.com.br), 5 distributed sshd attacks on account [root] in the l ... show more 189.4.4.85 (BR/Brazil/bd040455.virtua.com.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 25 04:01:16 21255 sshd[9734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.154.241.42 user=root Apr 25 04:01:18 21255 sshd[9734]: Failed password for root from 103.154.241.42 port 47992 ssh2 Apr 25 04:50:54 21255 sshd[19066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85 user=root Apr 25 04:45:38 21255 sshd[18298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.155.160 user=root Apr 25 04:45:40 21255 sshd[18298]: Failed password for root from 138.197.155.160 port 43436 ssh2 IP Addresses Blocked: 103.154.241.42 (MM/Myanmar/-) show less	Brute-Force SSH
🇷🇺 victoryur	2026-04-16 00:02:45 (1 month ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇬🇧 thetomtaylor.co.uk	2026-04-08 23:06:08 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,wa01]	Brute-Force SSH

Showing 1 to 15 of 8473 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.236

🇨🇳 111.53.208.194

🇺🇸 69.171.234.25

🇺🇸 69.171.234.10

🇰🇷 58.226.230.112

🇦🇱 130.49.189.41

🇹🇷 88.247.51.230

🇺🇸 54.167.252.36

🇸🇬 43.173.177.125

🇺🇸 173.252.95.62

🇮🇳 122.187.234.73

🇰🇷 118.194.249.8

🇨🇳 111.11.250.195

🇺🇸 162.216.149.173

🇺🇸 100.30.233.226

🇪🇸 46.6.124.216

🇺🇸 45.79.115.59

🇧🇪 198.235.24.196

🇺🇸 192.155.90.80

🇿🇦 192.143.234.45