This IP address has been reported a total of
51
times from
46 distinct
sources.
44.243.58.195 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 12
reports;
Germany
with 11
reports;
France
with 7
reports.
The most common categories in these recent reports were:
SSH
48
times;
Brute-Force
44
times;
Port Scan
7
times;
Hacking
4
times;
Web App Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
44.243.58.195 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time ...
show more44.243.58.195 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time wasted: 1m 35s. Total bytes sent by tarpit: 10.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
This IP address carried out 96 port scanning attempts on 01-10-2026. For more information or to repo ...
show moreThis IP address carried out 96 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
44.243.58.195 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time ...
show more44.243.58.195 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time wasted: 1m 35s. Total bytes sent by tarpit: 10.00KiB. Report generated by Endlessh Report Generator v1.2.3
show less
Repeated SSH connections that never attempted authentication (pre-auth probing) recorded by a honeyp ...
show moreRepeated SSH connections that never attempted authentication (pre-auth probing) recorded by a honeypot sensor network.
Threat score: 15/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 0 (0 bad password, 0 invalid user) | 0 success | 16 total SSH log events | seen on 2 sensor(s)
Origin: United States (US) | AS16509 Amazon.com, Inc. | datacenter | 44.243.58.0/24
First seen: 2026-10-01 16:04:07 UTC | Last seen: 2026-10-01 17:09:18 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Automated report: 4 SSH authentication failure events observed during the last 15 minutes against TC ...
show moreAutomated report: 4 SSH authentication failure events observed during the last 15 minutes against TCP port 22.
show less
2026-10-01T19:24:22.970198+03:00 singularity2 sshd[273551]: Connection closed by 44.243.58.195 port ...
show more2026-10-01T19:24:22.970198+03:00 singularity2 sshd[273551]: Connection closed by 44.243.58.195 port 53910 [preauth]
2026-10-01T19:24:23.924985+03:00 singularity2 sshd[273553]: Connection closed by 44.243.58.195 port 53916 [preauth]
2026-10-01T19:24:24.591128+03:00 singularity2 sshd[273555]: Unable to negotiate with 44.243.58.195 port 53928: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
