144.225.43.82

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
692 reports
123 reporters Β· latest 14 minutes ago
ISP
HostDZire Web Services Pvt. Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS60781
Domain Name
hostdzire.com
Country
πŸ‡³πŸ‡± Netherlands
City
Haarlem, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
692 from 123 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡ΊπŸ‡Έ United States of America 397 πŸ‡ΈπŸ‡¬ Singapore 108 πŸ‡«πŸ‡· France 50
Most common categories Brute-Force 561 Hacking 427 Port Scan 148 SSH 8 Web App Attack 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡ΊπŸ‡Έ xmission.com
Blocked by UFW (TCP on 23389) Source port: 47620 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 144.225.43.82) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
πŸ‡©πŸ‡ͺ kingjan1999
Blocked by UFW [23389/tcp] | SPT: 47620 | TTL: 248 | LEN: 44 | TOS: 0x00 β€’ Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
πŸ‡¨πŸ‡¦ Sakusen
RDP (TCP/3389): 156 connections
Port Scan
πŸ‡ΊπŸ‡Έ Cotty
Automated sensor: 10 RDP brute-force attempts from this IP during the current reporting window (latest 2026-11-03T19:42Z). Usernames tried: 1.
Brute-Force
πŸ‡ΊπŸ‡Έ IndigoRidge
Knock-Knock RDP honeypot activity; time=2026-11-03 19:25:07; username=administrator
Brute-Force
πŸ‡ΊπŸ‡Έ wristhulk
Honeypot: RDP brute-force on OpenCanary honeypot (port 3389). Username: 'rdp-async'. (2 attempts)
Brute-Force
πŸ‡ΊπŸ‡Έ Cotty
Automated sensor: 10 RDP brute-force attempts from this IP during the current reporting window (latest 2026-11-03T14:02Z). Usernames tried: 1.
Brute-Force
πŸ‡©πŸ‡ͺ BULLSEYE
Automated security detection: RDP brute-force activity blocked by IPBan. Source: IPBan/RDP. Events=1, observations=5.
Brute-Force
πŸ‡ΊπŸ‡Έ Cotty
Automated sensor: 11 RDP brute-force attempts from this IP during the current reporting window (latest 2026-11-03T08:17Z). Usernames tried: 1.
Brute-Force
πŸ‡ΊπŸ‡Έ Tecmaya
RDP brute-force: 1 failed login attempt in the last 24 hours.
Brute-Force Port Scan
πŸ‡ΊπŸ‡Έ drewf.ink
[05:44] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
πŸ‡«πŸ‡· AmStaff
Honeypot: 24 connection attempts (port scan). Targeted ports: RDP.
Port Scan
πŸ‡ΊπŸ‡Έ drewf.ink
[05:26] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[05:09] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[04:50] RDP NLA authentication attempt as Administrator (NTLMv2 captured, workstation='?')
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡§πŸ‡· 138.99.196.73
πŸ‡ΊπŸ‡Έ 66.132.224.93
πŸ‡ΊπŸ‡Έ 216.25.90.86
πŸ‡ΊπŸ‡Έ 192.169.226.3
πŸ‡²πŸ‡½ 187.161.141.44
πŸ‡³πŸ‡± 185.223.235.17
πŸ‡¨πŸ‡³ 183.222.230.188
πŸ‡·πŸ‡Έ 178.220.136.225
πŸ‡ΈπŸ‡¬ 167.172.79.117
πŸ‡ΊπŸ‡Έ 147.185.132.62
πŸ‡ΈπŸ‡¬ 146.190.89.248
πŸ‡΅πŸ‡° 118.107.139.224
πŸ‡³πŸ‡± 77.239.124.160
πŸ‡©πŸ‡ͺ 69.5.169.226
πŸ‡§πŸ‡ͺ 34.78.224.61
πŸ‡¦πŸ‡· 181.174.142.191
πŸ‡ΊπŸ‡Έ 136.116.228.221
πŸ‡ΊπŸ‡Έ 100.53.185.193
πŸ‡ΊπŸ‡Έ 70.140.83.249
πŸ‡ΊπŸ‡Έ 69.46.46.145
feedback