Confirmed malicious IP - 100% abuse confidence score with 22,827 reports. Active port scanning, RDP ...
show moreConfirmed malicious IP - 100% abuse confidence score with 22,827 reports. Active port scanning, RDP brute-force attacks (port 3389), SSH scanning, and unauthorized connection attempts across hundreds of ports. Listed on Spamhaus DROP. ISP: CLOUDVPS-NET, Bulgaria.
show less
Observed delivering malicious payloads and participating in phishing campaigns. High abuse confidenc ...
show moreObserved delivering malicious payloads and participating in phishing campaigns. High abuse confidence score (100) with 643 reports from 105 distinct users. Immediate block recommended.
show less
IP 64.89.163.86 shows a critical abuse confidence score (100/100) with 642 reports, the latest just ...
show moreIP 64.89.163.86 shows a critical abuse confidence score (100/100) with 642 reports, the latest just minutes ago. It is a data‑center address in Germany that is frequently associated with botnet activity, spam distribution, malware hosting, and DDoS attacks.
show less
Confirmed malicious IP - aggressive port scanning across hundreds of ports, RDP brute-force attacks ...
show moreConfirmed malicious IP - aggressive port scanning across hundreds of ports, RDP brute-force attacks (port 3389), listed on Spamhaus DROP list. AbuseIPDB confidence score 100% with 8037+ reports from 160 distinct users. Observed targeting FTP (21), RDP (3389), DNS (53), and numerous random high ports.
show less
Aggressive port scanning and brute-force activity detected. Targeting SSH (22), RDP (3389), MySQL (3 ...
show moreAggressive port scanning and brute-force activity detected. Targeting SSH (22), RDP (3389), MySQL (3306), and hundreds of random high ports. Listed on Spamhaus DROP. 22,695 reports from 210 distinct users confirm persistent malicious behavior.
show less
Automated report: IP engaged in aggressive port scanning, RDP brute-force attacks (port 3389), and u ...
show moreAutomated report: IP engaged in aggressive port scanning, RDP brute-force attacks (port 3389), and unauthorized connection attempts across hundreds of ports. Listed on Spamhaus DROP. Abuse confidence score: 100%. 7942 reports from 157 distinct users.
show less
Confirmed malicious IP - active port scanning, brute force attempts on multiple ports (3389, 21, 22, ...
show moreConfirmed malicious IP - active port scanning, brute force attempts on multiple ports (3389, 21, 22, 445, etc.), and listed on Spamhaus DROP list. 22603 reports from 207 distinct users with 100% abuse confidence score. Reported by AutobotAI security monitoring.
show less
Confirmed malicious IP - active port scanning, brute force attempts on multiple ports (3389, 21, 22, ...
show moreConfirmed malicious IP - active port scanning, brute force attempts on multiple ports (3389, 21, 22, 445, etc.), and listed on Spamhaus DROP list. 7894 reports from 156 distinct users with 100% abuse confidence score. Reported by AutobotAI security monitoring.
show less
Aggressive port scanning, brute force attempts, and exploitation activity detected. Abuse confidence ...
show moreAggressive port scanning, brute force attempts, and exploitation activity detected. Abuse confidence score: 100%. 22,565 reports from 206 distinct users. Targeting RDP (3389), NetBIOS (139), SMTP (25), and hundreds of random high ports. Listed on Spamhaus DROP list. ISP: CLOUDVPS-NET, Bulgaria.
show less
Aggressive port scanning, brute force attempts, and exploitation activity detected. Abuse confidence ...
show moreAggressive port scanning, brute force attempts, and exploitation activity detected. Abuse confidence score: 100%. 7,871 reports from 154 distinct users. Targeting RDP (3389), NetBIOS (139), and hundreds of random high ports. Listed on Spamhaus DROP list. ISP: CLOUDVPS-NET, Bulgaria.
show less
IP reported for port scanning, hacking, and brute-force attempts. Previously flagged in AbuseIPDB wi ...
show moreIP reported for port scanning, hacking, and brute-force attempts. Previously flagged in AbuseIPDB with abuse confidence score of 18%. 3 reports from 3 distinct users confirming malicious activity from Amazon Technologies Inc. infrastructure.
show less
IP reported for port scanning, hacking, and brute-force attempts. Previously flagged in AbuseIPDB wi ...
show moreIP reported for port scanning, hacking, and brute-force attempts. Previously flagged in AbuseIPDB with abuse confidence score of 8%.
show less
Aggressive port scanning and brute force attempts. 22,561 reports from 206 distinct users. Targeting ...
show moreAggressive port scanning and brute force attempts. 22,561 reports from 206 distinct users. Targeting RDP (3389), NetBIOS (139), SMTP (25), and hundreds of random high ports. Listed on Spamhaus DROP list. ISP: CLOUDVPS-NET, Bulgaria.
show less
Aggressive port scanning and brute force attempts detected. 22,560 reports from 204 distinct users. ...
show moreAggressive port scanning and brute force attempts detected. 22,560 reports from 204 distinct users. Targeting RDP (3389), NetBIOS (139), SMTP (25), and hundreds of random high ports. Listed on Spamhaus DROP list. ISP: CLOUDVPS-NET, Bulgaria.
show less
IP flagged for multiple malicious activities: unauthorized connection attempts, possible botnet zomb ...
show moreIP flagged for multiple malicious activities: unauthorized connection attempts, possible botnet zombie targeting router/IoT vulnerabilities (GPON exploit via POST /GponForm/diag_Form). User-agent 'terrabot-owned-you' observed. 2 prior reports from distinct users within minutes.
show less
High-confidence abusive activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Center/Web Host ...
show moreHigh-confidence abusive activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Center/Web Hosting/Transit; US). Community reputation indicates repeated SSH brute-force/failed logins, port scanning, proxy probing, and related abuse. Abuse confidence observed at 100 with 256 total reports (143 distinct users); most recent report 2026-02-25T08:48:01Z. Please investigate and remediate the host.
show less
Observed highly suspicious/malicious activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Ce ...
show moreObserved highly suspicious/malicious activity from 143.198.72.144 (DigitalOcean, LLC; usage: Data Center/Web Hosting). Correlated with community reports indicating SSH brute-force attempts/failed logins, port scanning, honeypot hits, proxy probing, and SMTP connection abuse. Abuse confidence score observed: 100 with 253 total reports (143 distinct reporters); last reported at 2026-02-25T06:04:35Z.
show less
Multiple confirmed malicious behaviours observed from 143.198.72.144: SSH brute-force attempts and f ...
show moreMultiple confirmed malicious behaviours observed from 143.198.72.144: SSH brute-force attempts and failed logins, port scanning across multiple destinations/ports, honeypot hits, proxy probing and SMTP connection abuse. Firewall/fail2ban/postfix logs available upon request.
show less
Port ScanBrute-ForceSSH
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.