This IP address has been reported a total of
63
times from
58 distinct
sources.
202.44.237.245 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 15
reports;
Germany
with 12
reports;
France
with 8
reports.
The most common categories in these recent reports were:
SSH
59
times;
Brute-Force
59
times;
Port Scan
4
times;
Hacking
3
times;
Bad Web Bot
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 11 12:47:16 mc sshd[3072936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreOct 11 12:47:16 mc sshd[3072936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.44.237.245
Oct 11 12:47:18 mc sshd[3072936]: Failed password for invalid user test2 from 202.44.237.245 port 52898 ssh2
Oct 11 12:47:21 mc sshd[3072936]: Failed password for invalid user test2 from 202.44.237.245 port 52898 ssh2
...
show less
2026-10-11T11:34:18.186494+00:00 edge-zap-akl01.int.pdx.net.uk sshd-session[2550846]: Invalid user t ...
show more2026-10-11T11:34:18.186494+00:00 edge-zap-akl01.int.pdx.net.uk sshd-session[2550846]: Invalid user test2 from 202.44.237.245 port 48788
2026-10-11T11:34:19.774298+00:00 edge-zap-akl01.int.pdx.net.uk sshd-session[2550846]: error: maximum authentication attempts exceeded for invalid user test2 from 202.44.237.245 port 48788 ssh2 [preauth]
2026-10-11T11:34:23.535753+00:00 edge-zap-akl01.int.pdx.net.uk sshd-session[2550876]: Invalid user test2 from 202.44.237.245 port 49020
...
show less
2026-10-11T09:49:24.956721+00:00 karl sshd-session[1302399]: pam_unix(sshd:auth): authentication fai ...
show more2026-10-11T09:49:24.956721+00:00 karl sshd-session[1302399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.44.237.245
2026-10-11T09:49:26.422034+00:00 karl sshd-session[1302399]: Failed password for invalid user test2 from 202.44.237.245 port 59102 ssh2
2026-10-11T09:49:29.236944+00:00 karl sshd-session[1302399]: Failed password for invalid user test2 from 202.44.237.245 port 59102 ssh2
...
show less
2026-10-11T16:25:12.929026+08:00 VM-8-9-debian sshd[3891243]: pam_unix(sshd:auth): authentication fa ...
show more2026-10-11T16:25:12.929026+08:00 VM-8-9-debian sshd[3891243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.44.237.245
2026-10-11T16:25:15.166219+08:00 VM-8-9-debian sshd[3891243]: Failed password for invalid user test2 from 202.44.237.245 port 41308 ssh2
2026-10-11T16:25:17.930918+08:00 VM-8-9-debian sshd[3891243]: Failed password for invalid user test2 from 202.44.237.245 port 41308 ssh2
...
show less
Port Scan
Brute-Force
Anonymous
2026-10-11T07:45:51.193064+00:00 polka sshd-session[291704]: Invalid user test2 from 202.44.237.245 ...
show more2026-10-11T07:45:51.193064+00:00 polka sshd-session[291704]: Invalid user test2 from 202.44.237.245 port 54236
2026-10-11T07:45:51.781246+00:00 polka sshd-session[291704]: error: maximum authentication attempts exceeded for invalid user test2 from 202.44.237.245 port 54236 ssh2 [preauth]
2026-10-11T07:45:55.697913+00:00 polka sshd-session[291706]: Invalid user test2 from 202.44.237.245 port 54438
2026-10-11T07:45:56.305997+00:00 polka sshd-session[291706]: error: maximum authentication attempts exceeded for invalid user test2 from 202.44.237.245 port 54438 ssh2 [preauth]
2026-10-11T07:46:00.625002+00:00 polka sshd-session[291708]: Invalid user test2 from 202.44.237.245 port 54650
...
show less
Oct 11 08:16:49 srv-ubuntu-dev3 sshd[2198646]: pam_unix(sshd:auth): authentication failure; logname= ...
show moreOct 11 08:16:49 srv-ubuntu-dev3 sshd[2198646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.44.237.245
Oct 11 08:16:51 srv-ubuntu-dev3 sshd[2198646]: Failed password for invalid user test2 from 202.44.237.245 port 57142 ssh2
Oct 11 08:16:53 srv-ubuntu-dev3 sshd[2198646]: Failed password for invalid user test2 from 202.44.237.245 port 57142 ssh2
Oct 11 08:16:57 srv-ubuntu-dev3 sshd[2198646]: Failed password for invalid user test2 from 202.44.237.245 port 57142 ssh2
Oct 11 08:17:00 srv-ubuntu-dev3 sshd[2198646]: Failed password for invalid user test2 from 202.44.237.245 port 57142 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
[Fail2Ban:sshd] 2026-10-11T04:36:24.806333+02:00 server sshd[1283914]: Failed password for invalid u ...
show more[Fail2Ban:sshd] 2026-10-11T04:36:24.806333+02:00 server sshd[1283914]: Failed password for invalid user test2 from 202.44.237.245 port 55674 ssh2 2026-10-11T04:36:28.131164+02:00 server sshd[1283914]: Failed password for invalid user test2 from 202.44.237.245 port 55674 ssh2 2026-10-11T04:36:30.387634+02:00 server sshd[1283914]: Failed password for invalid user test2 from 202.44.237.245 port 55674 ssh2
show less
[Honeypot Report] Unauthorised shell access and command execution via SSH
A remote host attempted t ...
show more[Honeypot Report] Unauthorised shell access and command execution via SSH
A remote host attempted to log in to our emulated SSH service, then obtained shell access and executed commands.
Observed: 2026-10-11 00:52 to 2026-10-11 00:54 UTC | 1 session | 13 events | SSH (port 22)
Attack chain:
1. 1 credential attempt: test2/123
2. Shell access obtained; 9 distinct commands executed: /ip cloud print ; ifconfig ; uname -a
Signatures: Host Reconnaissance Commands
Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/10/202.44.237.245.md
Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised.
show less
2026-10-11T01:09:42.068044+02:00 serengeti sshd-session[1015849]: Invalid user test2 from 202.44.237 ...
show more2026-10-11T01:09:42.068044+02:00 serengeti sshd-session[1015849]: Invalid user test2 from 202.44.237.245 port 58846
2026-10-11T01:09:42.069862+02:00 serengeti sshd-session[1015849]: Failed password for invalid user test2 from 202.44.237.245 port 58846 ssh2
2026-10-11T01:09:42.270124+02:00 serengeti sshd-session[1015849]: Failed password for invalid user test2 from 202.44.237.245 port 58846 ssh2
2026-10-11T01:09:42.474776+02:00 serengeti sshd-session[1015849]: Failed password for invalid user test2 from 202.44.237.245 port 58846 ssh2
2026-10-11T01:09:42.679801+02:00 serengeti sshd-session[1015849]: Failed password for invalid user test2 from 202.44.237.245 port 58846 ssh2
...
show less
SSH brute force: 32 failed login attempts within 10 min. Reported automatically by a SIEM; contact v ...
show moreSSH brute force: 32 failed login attempts within 10 min. Reported automatically by a SIEM; contact via abuse mailbox of the reporting network.
show less
