JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.101.64.7

5.101.64.7 was found in our database!

This IP was reported 187 times. Confidence of Abuse is 100%: ?

100%

ISP	public vlans of DC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS34665
Hostname(s)	scan.f6.security
Domain Name	pindc.ru
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.101.64.7

Whois 5.101.64.7

IP Abuse Reports for 5.101.64.7:

This IP address has been reported a total of 187 times from 52 distinct sources. 5.101.64.7 was first reported on September 18th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.fransveldman.world	2026-06-08 09:51:51 (18 hours ago)	2026-06-08 9:51:49 37877 [Warning] Access denied for user 'root'@'scan.f6.security' 2026-06-08 9:5 ... show more 2026-06-08 9:51:49 37877 [Warning] Access denied for user 'root'@'scan.f6.security' 2026-06-08 9:51:49 37878 [Warning] Access denied for user 'root'@'scan.f6.security' 2026-06-08 9:51:49 37879 [Warning] Access denied for user 'root'@'scan.f6.security' 2026-06-08 9:51:49 37880 [Warning] Access denied for user 'root'@'scan.f6.security' 2026-06-08 9:51:50 37881 [Warning] Access denied for user 'root'@'scan.f6.security' ... show less	Web App Attack
🇫🇷 HyperSpeeed	2026-06-08 09:49:56 (18 hours ago)	2026-06-08T09:49:52.641176Z 117 [Note] [MY-010926] [Server] Access denied for user 'root'@'scan.f6.s ... show more 2026-06-08T09:49:52.641176Z 117 [Note] [MY-010926] [Server] Access denied for user 'root'@'scan.f6.security' (using password: NO) 2026-06-08T09:49:52.931902Z 118 [Note] [MY-010926] [Server] Access denied for user 'root'@'scan.f6.security' (using password: YES) 2026-06-08T09:49:53.199821Z 119 [Note] [MY-010926] [Server] Access denied for user 'root'@'scan.f6.security' (using password: YES) 2026-06-08T09:49:53.460392Z 120 [Note] [MY-010926] [Server] Access denied for user 'root'@'scan.f6.security' (using password: YES) 2026-06-08T09:49:53.961810Z 121 [Note] [MY-010926] [Server] Access denied for user 'root'@'scan.f6.security' (using password: YES) ... show less	Brute-Force
🇩🇪 ipcop.net	2026-06-08 08:28:30 (20 hours ago)	2026-06-08T10:28:28.075488+02:00 router01.gfa-steriltechnik.de sshd[1832858]: error: kex_exchange_id ... show more 2026-06-08T10:28:28.075488+02:00 router01.gfa-steriltechnik.de sshd[1832858]: error: kex_exchange_identification: client sent invalid protocol identifier "EHLO" 2026-06-08T10:28:28.075616+02:00 router01.gfa-steriltechnik.de sshd[1832858]: banner exchange: Connection from 5.101.64.7 port 52506: invalid format 2026-06-08T10:28:29.500004+02:00 router01.gfa-steriltechnik.de sshd[1832859]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-08T10:28:29.500213+02:00 router01.gfa-steriltechnik.de sshd[1832859]: Connection reset by 5.101.64.7 port 52507 2026-06-08T10:28:29.619892+02:00 router01.gfa-steriltechnik.de sshd[1832860]: banner exchange: Connection from 5.101.64.7 port 52508: invalid format show less	Brute-Force
🇸🇪 NordhTech	2026-06-08 08:00:15 (20 hours ago)	More than 3 malicious connection attempts, trying port(s) 5001/tcp, then blocked from services ...	Port Scan Hacking
🇫🇮 hellasleeper	2026-06-08 07:43:39 (21 hours ago)	SSH honeypot attacker (Cowrie) on Hermes-NOC	Port Scan Brute-Force
🇩🇪 ipcop.net	2026-06-08 01:48:12 (1 day ago)	2026-06-08T03:48:11.623155+02:00 router01.ib-heddier.de sshd[355301]: error: kex_exchange_identifica ... show more 2026-06-08T03:48:11.623155+02:00 router01.ib-heddier.de sshd[355301]: error: kex_exchange_identification: client sent invalid protocol identifier "EHLO" 2026-06-08T03:48:11.623305+02:00 router01.ib-heddier.de sshd[355301]: banner exchange: Connection from 5.101.64.7 port 51210: invalid format 2026-06-08T03:48:11.792831+02:00 router01.ib-heddier.de sshd[355302]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-08T03:48:11.792963+02:00 router01.ib-heddier.de sshd[355302]: Connection reset by 5.101.64.7 port 51211 2026-06-08T03:48:11.864284+02:00 router01.ib-heddier.de sshd[355303]: banner exchange: Connection from 5.101.64.7 port 51212: invalid format show less	Brute-Force
🇫🇷 adnscom.net	2026-06-07 19:10:42 (1 day ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇦🇷 Bruno	2026-06-07 16:14:02 (1 day ago)	Port Scanner: 5.101.64.7	Port Scan
🇩🇪 kkeyser	2026-06-07 12:14:00 (1 day ago)	\x00\x00\x00'\xFFSMBr\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0 ... show more \x00\x00\x00'\xFFSMBr\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0E\x00\x02NT LM 0.12\x00 show less	Web App Attack
🇺🇸 RAP	2026-06-07 11:08:51 (1 day ago)	2026-06-07 11:08:51 UTC Unauthorized activity to TCP port 22. SSH	SSH
Anonymous	2026-06-07 10:10:38 (1 day ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
🇺🇸 technash	2026-06-07 02:50:00 (2 days ago)	Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.	Port Scan
Anonymous	2026-06-07 01:14:55 (2 days ago)	$f2bV_matches	Port Scan Hacking Brute-Force
Anonymous	2026-06-07 00:46:11 (2 days ago)	Honeypot hit: Unauthorized traffic on 21/ftpd Reported by: https://github.com/sefinek/T-Pot-To-Abuse ... show more Honeypot hit: Unauthorized traffic on 21/ftpd Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 StopAbuse	2026-06-07 00:40:25 (2 days ago)	tcp/1194 tcp/21 tcp/22 tcp/3128 tcp/42518 tcp/443 tcp/5000 tcp/5001 tcp/54804 tcp/80 tcp/8080 tcp/84 ... show more tcp/1194 tcp/21 tcp/22 tcp/3128 tcp/42518 tcp/443 tcp/5000 tcp/5001 tcp/54804 tcp/80 tcp/8080 tcp/8443 tcp/9001 show less	Port Scan

Showing 1 to 15 of 187 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.19.28

🇻🇳 160.30.160.210

🇬🇧 144.126.231.234

🇧🇷 45.205.1.71

🇨🇳 27.155.120.135

🇰🇷 222.239.251.12

🇮🇩 210.79.191.205

🇺🇸 195.184.76.112

🇵🇦 190.97.165.93

🇺🇸 173.255.221.189

🇨🇦 142.44.247.134

🇺🇸 135.237.123.246

🇮🇳 103.161.54.61

🇫🇷 85.217.140.46

🇩🇪 209.38.234.169

🇺🇸 184.105.247.194

🇮🇳 172.253.220.23

🇿🇦 102.213.6.53

🇨🇦 85.217.149.8

🇬🇧 35.203.210.158