This IP address has been reported a total of
12
times from
11 distinct
sources.
112.64.14.199 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH credential brute-force observed by honeypot.
Source IP: 112.64.14.199
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 112.64.14.199
Targeted device: NAS
First seen: 21 Sep 2026 02:30:51 UTC
Last seen: 21 Sep 2026 02:30:53 UTC
Attempts: 3
Client: SSH-2.0-libssh_0.9.5
Sample credentials: root:Qwerty1, admin:NoPassGst1234
show less
2026-08-31T23:53:12.532667+02:00 hosting.defencegeeks.net sshd-session[3393237]: pam_unix(sshd:auth) ...
show more2026-08-31T23:53:12.532667+02:00 hosting.defencegeeks.net sshd-session[3393237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199 user=root
2026-08-31T23:53:14.355556+02:00 hosting.defencegeeks.net sshd-session[3393237]: Failed password for root from 112.64.14.199 port 55365 ssh2
2026-08-31T23:53:14.720142+02:00 hosting.defencegeeks.net sshd-session[3393240]: Invalid user admin from 112.64.14.199 port 55443
2026-08-31T23:53:14.725639+02:00 hosting.defencegeeks.net sshd-session[3393240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199
2026-08-31T23:53:16.462325+02:00 hosting.defencegeeks.net sshd-session[3393240]: Failed password for invalid user admin from 112.64.14.199 port 55443 ssh2
2026-08-31T23:53:16.783934+02:00 hosting.defencegeeks.net sshd-session[3393244]: Invalid user user from 112.64.14.199 port 55524
...
show less
Brute-Force
SSH
Anonymous
2026-08-11T12:06:25.801945 www.yerkanian.com sshd-session[955051]: pam_unix(sshd:auth): authenticati ...
show more2026-08-11T12:06:25.801945 www.yerkanian.com sshd-session[955051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199 user=root
2026-08-11T12:06:27.293850 www.yerkanian.com sshd-session[955051]: Failed password for root from 112.64.14.199 port 54611 ssh2
2026-08-11T12:06:27.278625 www.yerkanian.com sshd-session[955054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199
2026-08-11T12:06:29.047309 www.yerkanian.com sshd-session[955054]: Failed password for invalid user admin from 112.64.14.199 port 54638 ssh2
2026-08-11T12:06:29.501159 www.yerkanian.com sshd-session[955058]: Invalid user user from 112.64.14.199 port 54664
2026-08-11T12:06:29.505339 www.yerkanian.com sshd-session[955058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199
2026-08-11T12:06:31.881274 www.yerkanian.com sshd-session[955058]: Failed password for invalid user
...
show less
2026-07-16T01:49:28.688027+00:00 kyana sshd[755101]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-07-16T01:49:28.688027+00:00 kyana sshd[755101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199
2026-07-16T01:49:30.564844+00:00 kyana sshd[755101]: Failed password for invalid user admin from 112.64.14.199 port 55092 ssh2
2026-07-16T01:49:30.640622+00:00 kyana sshd[755101]: Disconnected from invalid user admin 112.64.14.199 port 55092 [preauth]
...
show less
2026-06-14T03:24:30.542117+00:00 vps.billy.wales sshd-session[547559]: Failed password for invalid u ...
show more2026-06-14T03:24:30.542117+00:00 vps.billy.wales sshd-session[547559]: Failed password for invalid user admin from 112.64.14.199 port 56213 ssh2
2026-06-14T03:24:31.700509+00:00 vps.billy.wales sshd-session[547561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199 user=root
2026-06-14T03:24:33.926295+00:00 vps.billy.wales sshd-session[547561]: Failed password for root from 112.64.14.199 port 56269 ssh2
2026-06-14T03:24:34.272440+00:00 vps.billy.wales sshd-session[547564]: Invalid user admin from 112.64.14.199 port 54272
2026-06-14T03:24:36.831567+00:00 vps.billy.wales sshd-session[547574]: Invalid user user from 112.64.14.199 port 54328
...
show less
Jun 4 04:03:09 server sshd[2337181]: Invalid user admin from 112.64.14.199 port 54939
Jun 4 04:03: ...
show moreJun 4 04:03:09 server sshd[2337181]: Invalid user admin from 112.64.14.199 port 54939
Jun 4 04:03:12 server sshd[2337185]: Invalid user admin from 112.64.14.199 port 55010
Jun 4 04:03:13 server sshd[2337187]: Invalid user user from 112.64.14.199 port 55052
...
show less
Blocked by UFW (TCP on 9101)
Source port: 56231
TTL: 115
Packet length: 48
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 9101)
Source port: 56231
TTL: 115
Packet length: 48
TOS: 0x08
This report (for 112.64.14.199) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-05-14T22:57:01.377500+06:00 zabbix sshd[409318]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-05-14T22:57:01.377500+06:00 zabbix sshd[409318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.14.199
2026-05-14T22:57:03.478374+06:00 zabbix sshd[409318]: Failed password for invalid user admin from 112.64.14.199 port 54627 ssh2
...
show less
2026-04-27T18:03:55.444459-07:00 leela sshd[4155472]: Invalid user admin from 112.64.14.199 port 551 ...
show more2026-04-27T18:03:55.444459-07:00 leela sshd[4155472]: Invalid user admin from 112.64.14.199 port 55132
2026-04-27T18:03:58.193366-07:00 leela sshd[4155476]: Invalid user admin from 112.64.14.199 port 55170
2026-04-27T18:03:59.485686-07:00 leela sshd[4155478]: Invalid user user from 112.64.14.199 port 55189
2026-04-27T18:04:00.889059-07:00 leela sshd[4155482]: Invalid user user2 from 112.64.14.199 port 55207
2026-04-27T18:04:03.942459-07:00 leela sshd[4155486]: Invalid user admin from 112.64.14.199 port 55245
...
show less
Blocked by UFW (TCP on 9101)
Source port: 54524
TTL: 115
Packet length: 48
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 9101)
Source port: 54524
TTL: 115
Packet length: 48
TOS: 0x08
This report (for 112.64.14.199) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩