This IP address has been reported a total of
318
times from
181 distinct
sources.
207.244.252.45 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-01-02T04:21:32.254715+08:00 self-dedi-wyse-5070-tna sshd[1143547]: Invalid user github from 207 ...
show more2026-01-02T04:21:32.254715+08:00 self-dedi-wyse-5070-tna sshd[1143547]: Invalid user github from 207.244.252.45 port 60184
2026-01-02T04:22:11.266368+08:00 self-dedi-wyse-5070-tna sshd[1143613]: Invalid user serge from 207.244.252.45 port 37520
2026-01-02T04:23:23.491805+08:00 self-dedi-wyse-5070-tna sshd[1143738]: Invalid user ubuntu from 207.244.252.45 port 46340
...
show less
Jan 1 20:17:45 s1-jellyfish sshd[899940]: Failed password for root from 207.244.252.45 port 51816 s ...
show moreJan 1 20:17:45 s1-jellyfish sshd[899940]: Failed password for root from 207.244.252.45 port 51816 ssh2
Jan 1 20:22:16 s1-jellyfish sshd[950241]: Invalid user serge from 207.244.252.45 port 35744
...
show less
Jan 1 20:26:39 kamergaz sshd[1769130]: Invalid user es from 207.244.252.45 port 42152
Jan 1 20:26: ...
show moreJan 1 20:26:39 kamergaz sshd[1769130]: Invalid user es from 207.244.252.45 port 42152
Jan 1 20:26:39 kamergaz sshd[1769130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.244.252.45
Jan 1 20:26:41 kamergaz sshd[1769130]: Failed password for invalid user es from 207.244.252.45 port 42152 ssh2
Jan 1 20:28:25 kamergaz sshd[1769674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.244.252.45 user=root
Jan 1 20:28:26 kamergaz sshd[1769674]: Failed password for root from 207.244.252.45 port 44468 ssh2
show less
Confirmed malicious activity observed via T-Pot honeypot Observed 488 events on port 22 (unknown) fr ...
show moreConfirmed malicious activity observed via T-Pot honeypot Observed 488 events on port 22 (unknown) from 2026-01-01T19:25:32+00:00 to 2026-01-01T19:49:44.395000+00:00. Sample: {"src_port": 39914, "event_type": "flow", "dest_port": 22, "src_ip": "207.244.252.45"}
show less
2026-01-01T16:31:31.773319+01:00 router03.eag-fpi.de sshd[3592756]: Invalid user altibase from 207.2 ...
show more2026-01-01T16:31:31.773319+01:00 router03.eag-fpi.de sshd[3592756]: Invalid user altibase from 207.244.252.45 port 43428
2026-01-01T16:31:31.906107+01:00 router03.eag-fpi.de sshd[3592756]: Disconnected from invalid user altibase 207.244.252.45 port 43428 [preauth]
2026-01-01T16:36:48.093877+01:00 router03.eag-fpi.de sshd[3593559]: Invalid user oscar from 207.244.252.45 port 44654
2026-01-01T16:36:48.221598+01:00 router03.eag-fpi.de sshd[3593559]: Disconnected from invalid user oscar 207.244.252.45 port 44654 [preauth]
2026-01-01T16:37:30.127946+01:00 router03.eag-fpi.de sshd[3593724]: Invalid user tunnel from 207.244.252.45 port 58094
show less
Brute-Force
Showing 1 to
15
of 318 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩