JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.24.64.49

195.24.64.49 was found in our database!

This IP was reported 606 times. Confidence of Abuse is 0%: ?

ISP	JSC RU-CENTER
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48287
Domain Name	nichost.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.24.64.49

Whois 195.24.64.49

IP Abuse Reports for 195.24.64.49:

This IP address has been reported a total of 606 times from 285 distinct sources. 195.24.64.49 was first reported on September 12th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-05-20 21:26:39 (1 month ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇫🇷 ACE-INFORMATIQUE.NC	2025-10-01 01:07:50 (8 months ago)	Fail2ban automated report	Brute-Force
🇺🇸 sh97	2025-09-28 16:06:08 (8 months ago)	US01-CB-WA: SSH Brute Force from 195.24.64.49 at 2025-09-28 21:36:08 IST	Brute-Force SSH
🇺🇸 sh97	2025-09-26 11:57:01 (8 months ago)	US02-RN-LAX: SSH Brute Force from 195.24.64.49 at 2025-09-26 17:27:01 IST	Brute-Force SSH
Anonymous	2025-09-24 08:27:14 (8 months ago)	2025-09-14T05:49:03.220949hz21.yumianalyticsweb.com sshd[21376]: Invalid user weblogic from 195.24.6 ... show more 2025-09-14T05:49:03.220949hz21.yumianalyticsweb.com sshd[21376]: Invalid user weblogic from 195.24.64.49 port 40670 2025-09-14T05:50:57.797045hz21.yumianalyticsweb.com sshd[21428]: Invalid user client from 195.24.64.49 port 41662 2025-09-14T05:58:44.903845hz21.yumianalyticsweb.com sshd[21676]: Invalid user titu from 195.24.64.49 port 53322 ... show less	Brute-Force SSH
🇩🇪 dbmwebdesign	2025-09-23 01:58:30 (8 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇹🇷 rtbh.com.tr	2025-09-20 20:08:55 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-19 20:08:53 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-19 09:02:28 (9 months ago)	This IP address carried out 2 SSH credential attack (attempts) on 18-09-2025. For more information o ... show more This IP address carried out 2 SSH credential attack (attempts) on 18-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-18 20:08:53 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-09-18 16:26:37 (9 months ago)	195.24.64.49 (RU/Russia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 195.24.64.49 (RU/Russia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 18 10:59:20 16386 sshd[10796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.189.234.27 user=root Sep 18 10:59:21 16386 sshd[10796]: Failed password for root from 12.189.234.27 port 43363 ssh2 Sep 18 11:26:30 16386 sshd[12784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.64.49 user=root Sep 18 11:05:38 16386 sshd[11255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.189.234.27 user=root Sep 18 11:04:32 16386 sshd[11173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.189.234.27 user=root Sep 18 11:04:35 16386 sshd[11173]: Failed password for root from 12.189.234.27 port 38749 ssh2 IP Addresses Blocked: 12.189.234.27 (US/United States/-) show less	Brute-Force SSH
🇮🇳 Parth Maniar	2025-09-18 16:22:14 (9 months ago)	This IP address carried out 92 SSH credential attack (attempts) on 17-09-2025. For more information ... show more This IP address carried out 92 SSH credential attack (attempts) on 17-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇫🇷 Eldeberen	2025-09-18 16:08:29 (9 months ago)	Bruteforced SSH server	Brute-Force SSH
🇭🇺 sRichy	2025-09-18 14:01:54 (9 months ago)	2025-09-18T15:49:44.907519+02:00 vpn sshd[17167]: Invalid user msfadmin from 195.24.64.49 port 45562 ... show more 2025-09-18T15:49:44.907519+02:00 vpn sshd[17167]: Invalid user msfadmin from 195.24.64.49 port 45562 2025-09-18T15:50:48.972447+02:00 vpn sshd[17177]: Invalid user elastic from 195.24.64.49 port 37084 2025-09-18T16:01:53.307017+02:00 vpn sshd[17387]: Invalid user titu from 195.24.64.49 port 35328 ... show less	Brute-Force SSH
🇦🇺 webnestify	2025-09-18 13:44:01 (9 months ago)	2025-09-18T13:43:58.736372+00:00 wn-au sshd[791266]: pam_unix(sshd:auth): authentication failure; lo ... show more 2025-09-18T13:43:58.736372+00:00 wn-au sshd[791266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.64.49 user=root 2025-09-18T13:43:58.736372+00:00 wn-au sshd[791266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.64.49 user=root 2025-09-18T13:44:00.810670+00:00 wn-au sshd[791266]: Failed password for root from 195.24.64.49 port 38222 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 606 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.208

🇭🇰 199.45.154.188

🇩🇪 151.123.177.247

🇨🇦 149.56.241.206

🇺🇸 147.185.132.234

🇨🇳 106.12.170.135

🇺🇸 73.36.177.174

🇨🇳 61.142.115.207

🇩🇪 54.93.86.181

🇷🇺 46.44.0.185

🇧🇷 20.206.105.71

🇰🇿 212.116.247.31

🇧🇦 195.222.57.190

🇧🇷 129.121.47.136

🇺🇸 107.150.103.155

🇷🇴 80.94.92.165

🇩🇪 69.5.169.193

🇮🇶 65.20.165.115

🇫🇮 64.188.73.116

🇺🇸 34.121.119.79