This IP address has been reported a total of
42
times from
40 distinct
sources.
112.66.130.64 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 10, successful ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 10, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (ch1) over 2026-09-17..2026-09-17. Reported by an SSH honeypot network; no production service involved.
show less
2026-09-17T20:42:29.610322+03:00 nexus6 sshd[2415223]: Invalid user ftpupload from 112.66.130.64 por ...
show more2026-09-17T20:42:29.610322+03:00 nexus6 sshd[2415223]: Invalid user ftpupload from 112.66.130.64 port 46792
...
show less
Brute-Force
SSH
Anonymous
SSH abuse or brute force attack detected by Fail2Ban
2026-09-17T19:33:33.110083+08:00 instance-20240519-1435 sshd[1322588]: Invalid user tmp from 112.66. ...
show more2026-09-17T19:33:33.110083+08:00 instance-20240519-1435 sshd[1322588]: Invalid user tmp from 112.66.130.64 port 32796
2026-09-17T19:44:54.091451+08:00 instance-20240519-1435 sshd[1331683]: Invalid user ubuntu from 112.66.130.64 port 45706
2026-09-17T19:46:07.704340+08:00 instance-20240519-1435 sshd[1332625]: Invalid user postgres from 112.66.130.64 port 33810
...
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 2, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 2, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (ch1) over 2026-09-17..2026-09-17. Reported by an SSH honeypot network; no production service involved.
show less
2026-09-17T04:16:53.995022-04:00 amadeus sshd-session[643768]: Invalid user filezilla from 112.66.13 ...
show more2026-09-17T04:16:53.995022-04:00 amadeus sshd-session[643768]: Invalid user filezilla from 112.66.130.64 port 44174
2026-09-17T04:24:49.700018-04:00 amadeus sshd-session[644456]: Connection from 112.66.130.64 port 39756 on 192.168.1.93 port 22 rdomain ""
2026-09-17T04:24:52.088071-04:00 amadeus sshd-session[644456]: Invalid user devuser from 112.66.130.64 port 39756
...
show less
Brute-Force
SSH
Anonymous
Sep 17 09:10:20 conf sshd[39191]: Disconnected from invalid user info 112.66.130.64 port 47770 [prea ...
show moreSep 17 09:10:20 conf sshd[39191]: Disconnected from invalid user info 112.66.130.64 port 47770 [preauth]
Sep 17 09:14:18 conf sshd[39930]: Connection from 112.66.130.64 port 51356 on 79.137.33.6 port 22 rdomain ""
Sep 17 09:14:26 conf sshd[39930]: Connection closed by 112.66.130.64 port 51356 [preauth]
...
show less
Sep 17 07:44:48 smtp sshd[2900029]: Failed password for invalid user gp from 112.66.130.64 port 5376 ...
show moreSep 17 07:44:48 smtp sshd[2900029]: Failed password for invalid user gp from 112.66.130.64 port 53766 ssh2
...
show less
2026-09-17T03:06:28.020325+00:00 de-fra2-lg1 sshd[1216385]: Invalid user log from 112.66.130.64 port ...
show more2026-09-17T03:06:28.020325+00:00 de-fra2-lg1 sshd[1216385]: Invalid user log from 112.66.130.64 port 40018
2026-09-17T03:08:08.288884+00:00 de-fra2-lg1 sshd[1216392]: Invalid user cristian from 112.66.130.64 port 59134
2026-09-17T03:11:54.091850+00:00 de-fra2-lg1 sshd[1216466]: Invalid user guest from 112.66.130.64 port 40924
...
show less
Brute-Force
SSH
Showing 1 to
15
of 42 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩