Confirmed malicious Tor exit node (tor-exit-34.for-privacy.net). Active SSH brute-force, port scanni ...
show moreConfirmed malicious Tor exit node (tor-exit-34.for-privacy.net). Active SSH brute-force, port scanning, web vulnerability scanning, and credential stuffing. Abuse confidence score: 100/100. 122 reports from 78 distinct users in last 90 days.
show less
Confirmed malicious Tor exit node (tor-exit-45.for-privacy.net). Active SSH brute force, WordPress a ...
show moreConfirmed malicious Tor exit node (tor-exit-45.for-privacy.net). Active SSH brute force, WordPress attacks, web scanning (xmlrpc.php), SQL injection, form spam, and DDoS. 119 reports from 76 distinct users in 90 days. AbuseConfidenceScore: 100%.
show less
Confirmed malicious Tor exit node (tor-exit-34.for-privacy.net). Active SSH brute-force, port scanni ...
show moreConfirmed malicious Tor exit node (tor-exit-34.for-privacy.net). Active SSH brute-force, port scanning, web vulnerability scanning, and credential stuffing. Abuse confidence score: 100/100. 121 reports from 79 distinct users in last 90 days.
show less
Known Tor exit node (tor-exit-45.for-privacy.net) with 100% abuse confidence score. Active SSH brute ...
show moreKnown Tor exit node (tor-exit-45.for-privacy.net) with 100% abuse confidence score. Active SSH brute force, web scanning (xmlrpc.php), WordPress attacks, SQL injection, form spam, and DDoS activity. 118 reports from 76 distinct users in 90 days.
show less
Shodan census scanner (dojo.census.shodan.io / FiberXpress BV, NL) with 100% abuse confidence score. ...
show moreShodan census scanner (dojo.census.shodan.io / FiberXpress BV, NL) with 100% abuse confidence score. Aggressive multi-port scanning across thousands of ports, brute force, honeypot hits, and service probing. 8429 total reports from 503 distinct users.
show less
SOCWave automated action: flagged as malicious/abusive based on elevated reports and abuse confidenc ...
show moreSOCWave automated action: flagged as malicious/abusive based on elevated reports and abuse confidence from AbuseIPDB; request to block.
show less
High-confidence abusive activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Center/Web Host ...
show moreHigh-confidence abusive activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Center/Web Hosting/Transit; US). Community reputation indicates repeated SSH brute-force/failed logins, port scanning, proxy probing, and related abuse. Abuse confidence observed at 100 with 256 total reports (143 distinct users); most recent report 2026-02-25T08:48:01Z. Please investigate and remediate the host.
show less
Observed highly suspicious/malicious activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Ce ...
show moreObserved highly suspicious/malicious activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Center/Web Hosting). Correlated with community reports indicating SSH brute-force attempts/failed logins, port scanning, honeypot hits, proxy probing, and SMTP connection abuse. Abuse confidence score observed: 100 with 253 total reports (143 distinct reporters); last reported at 2026-02-25T06:04:35Z.
show less
Multiple confirmed malicious behaviours observed from 143.198.72.144: SSH brute-force attempts and f ...
show moreMultiple confirmed malicious behaviours observed from 143.198.72.144: SSH brute-force attempts and failed logins, port scanning across multiple destinations/ports, honeypot hits, proxy probing and SMTP connection abuse. Firewall/fail2ban/postfix logs available upon request.
show less
Multiple confirmed reports and log evidence of malicious activity from 143.198.72.144: SSH brute-for ...
show moreMultiple confirmed reports and log evidence of malicious activity from 143.198.72.144: SSH brute-force and probes, port scanning, honeypot hits, proxy probing and mail connection abuse. AbuseIPDB shows 249 reports (lastReportedAt: 2026-02-24T09:19:48+00:00). Reporting to contribute to community defenses.
show less
Malicious IP detected conducting aggressive WordPress brute-force attacks targeting wp-login.php end ...
show moreMalicious IP detected conducting aggressive WordPress brute-force attacks targeting wp-login.php endpoints. Observed multiple failed authentication attempts with credential stuffing and dictionary-based password attacks. Attack patterns include username enumeration, user-agent spoofing (rotating between Windows, Linux, and mobile user-agents), and persistent login attempts over multiple days. This IP is operating as an open proxy facilitating automated web application attacks. Source has been blocked via firewall rules after triggering security alerts. IP shows 100% abuse confidence score with 226 reports from 42 distinct sources globally. Immediate blocking recommended for all web infrastructure.
show less
Suspicious activity detected - unauthorized connection attempt and port scanning behavior observed f ...
show moreSuspicious activity detected - unauthorized connection attempt and port scanning behavior observed from this IP address
show less
Reported IP 132.148.176.188 for suspicious activities including unauthorized connection attempts, po ...
show moreReported IP 132.148.176.188 for suspicious activities including unauthorized connection attempts, port scanning, and brute-force attempts detected in system logs. This IP shows patterns consistent with malicious scanning behavior.
show less
Suspicious activity detected from IP address 132.148.176.188. Observed unauthorized connection attem ...
show moreSuspicious activity detected from IP address 132.148.176.188. Observed unauthorized connection attempts and potential brute-force behavior. Reported for security monitoring purposes.
show less
This IP address has been flagged for suspicious activity and potential malicious behavior. Please in ...
show moreThis IP address has been flagged for suspicious activity and potential malicious behavior. Please investigate further.
show less
This IP address has been flagged for suspicious activity and potential abuse. Please investigate fur ...
show moreThis IP address has been flagged for suspicious activity and potential abuse. Please investigate further.
show less
This IP was reviewed and found to participate in unauthorized brute-force attempts and other malicio ...
show moreThis IP was reviewed and found to participate in unauthorized brute-force attempts and other malicious activities. Reported for further analysis and recordkeeping. The details were gathered respecting privacy and security protocols.
show less
Reported as part of routine security check, no immediate evidence of malicious activity found but co ...
show moreReported as part of routine security check, no immediate evidence of malicious activity found but continuous monitoring is advised.
show less