This IP address has been reported a total of
60
times from
49 distinct
sources.
164.132.199.6 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Multiple SSH login attempts from 164.132.199.6 targeting user(s): admin2,adminuser | Server Managed ...
show moreMultiple SSH login attempts from 164.132.199.6 targeting user(s): admin2,adminuser | Server Managed by Focusnic
show less
2026-09-02T19:21:34.645298+02:00 host1 sshd[1223986]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-09-02T19:21:34.645298+02:00 host1 sshd[1223986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.199.6
2026-09-02T19:21:35.851213+02:00 host1 sshd[1223986]: Failed password for invalid user admin2 from 164.132.199.6 port 43064 ssh2
2026-09-02T19:21:37.373880+02:00 host1 sshd[1223996]: Invalid user adminuser from 164.132.199.6 port 43078
2026-09-02T19:21:37.390326+02:00 host1 sshd[1223996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.199.6
2026-09-02T19:21:39.674985+02:00 host1 sshd[1223996]: Failed password for invalid user adminuser from 164.132.199.6 port 43078 ssh2
...
show less
SSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoin ...
show moreSSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoint, behavior consistent with automated SSH scanning or brute-force reconnaissance.
show less
2026-09-02T12:07:23.284033likely-lavender.ptr.network sshd[84996]: Invalid user admin2 from 164.132. ...
show more2026-09-02T12:07:23.284033likely-lavender.ptr.network sshd[84996]: Invalid user admin2 from 164.132.199.6 port 47334
2026-09-02T12:07:23.333782likely-lavender.ptr.network sshd[84996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.199.6
2026-09-02T12:07:25.290326likely-lavender.ptr.network sshd[84996]: Failed password for invalid user admin2 from 164.132.199.6 port 47334 ssh2
...
show less
2026-09-02T20:07:22.583547+08:00 CVM24121 sshd[3255883]: Invalid user admin2 from 164.132.199.6 port ...
show more2026-09-02T20:07:22.583547+08:00 CVM24121 sshd[3255883]: Invalid user admin2 from 164.132.199.6 port 47088
2026-09-02T20:07:22.780029+08:00 CVM24121 sshd[3255883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.199.6
2026-09-02T20:07:24.600699+08:00 CVM24121 sshd[3255883]: Failed password for invalid user admin2 from 164.132.199.6 port 47088 ssh2
...
show less
[Fail2Ban] Banned 164.132.199.6 for 600 seconds. Relevant log lines: 2026-09-02T13:40:27&638665+07:0 ...
show more[Fail2Ban] Banned 164.132.199.6 for 600 seconds. Relevant log lines: 2026-09-02T13:40:27&638665+07:00 iZk1a2l3gukhtm6gic2ky3Z sshd&1075990&: Invalid user from 164&132&199&6 port 38976 2026-09-02T13:46:56&738369+07:00 iZk1a2l3gukhtm6gic2ky3Z sshd&1076007&: Invalid user admin2 from 164&132&199&6 port 56660 2026-09-02T13:46:56&988939+07:00 iZk1a2l3gukhtm6gic2ky3Z sshd&1076007&: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164&132&199&6 2026-09-02T13:46:58&746706+07:00 iZk1a2l3gukhtm6gic2ky3Z sshd&1076007&: Failed password for invalid user admin2 from 164&132&199&6 port 56660 ssh2
show less
systemd timer sync; fail2ban jail=sshd host=tk ip=164.132.199.6; evidence=fail2ban log NOTICE Ban ev ...
show moresystemd timer sync; fail2ban jail=sshd host=tk ip=164.132.199.6; evidence=fail2ban log NOTICE Ban event
show less
164.132.199.6 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time ...
show more164.132.199.6 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 7s. Total bytes sent by tarpit: 755B. Report generated by Endlessh Report Generator v1.2.3
show less
Brute-Force
Port Scan
SSH
Hacking
Showing 1 to
15
of 60 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩