Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 64.112.42.149
This IP address has been reported a total of
198
times from
156 distinct
sources.
64.112.42.149 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 42
reports;
United States of America
with 31
reports;
Netherlands
with 19
reports.
The most common categories in these recent reports were:
Brute-Force
192
times;
SSH
186
times;
Hacking
6
times;
Exploited Host
4
times;
Port Scan
3
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 64.112.42.149 at 2026-09-24 14:24:2 ...
show moreIN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 64.112.42.149 at 2026-09-24 14:24:20 EDT
show less
IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 64.112.42.149 at 2026-09-24 02:51:4 ...
show moreIN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 64.112.42.149 at 2026-09-24 02:51:41 EDT
show less
Sep 24 07:04:25 wh02 sshd[3411157]: Invalid user vision from 64.112.42.149 port 57176
Sep 24 07:04:2 ...
show moreSep 24 07:04:25 wh02 sshd[3411157]: Invalid user vision from 64.112.42.149 port 57176
Sep 24 07:04:25 wh02 sshd[3411157]: Received disconnect from 64.112.42.149 port 57176:11: Bye Bye [preauth]
Sep 24 07:04:25 wh02 sshd[3411157]: Disconnected from invalid user vision 64.112.42.149 port 57176 [preauth]
Sep 24 07:08:13 wh02 sshd[3414408]: Received disconnect from 64.112.42.149 port 34660:11: Bye Bye [preauth]
Sep 24 07:08:13 wh02 sshd[3414408]: Disconnected from authenticating user root 64.112.42.149 port 34660 [preauth]
Sep 24 07:09:49 wh02 sshd[3415377]: Invalid user app from 64.112.42.149 port 51630
Sep 24 07:09:49 wh02 sshd[3415377]: Received disconnect from 64.112.42.149 port 51630:11: Bye Bye [preauth]
Sep 24 07:09:49 wh02 sshd[3415377]: Disconnected from invalid user app 64.112.42.149 port 51630 [preauth]
Sep 24 07:11:25 wh02 sshd[3417259]: Received disconnect from 64.112.42.149 port 60134:11: Bye Bye [preauth]
Sep 24 07:11:25 wh02 sshd[3417259]: Disconnected from authenticating u
show less
2026-09-24T01:42:30.423006-04:00 Host-KEWR-E sshd[10849]: User root from 64.112.42.149 not allowed b ...
show more2026-09-24T01:42:30.423006-04:00 Host-KEWR-E sshd[10849]: User root from 64.112.42.149 not allowed because not listed in AllowUsers
...
show less
2026-09-24T06:29:26.359719+01:00 dlcentre3 sshd[1067711]: Invalid user ali from 64.112.42.149 port 3 ...
show more2026-09-24T06:29:26.359719+01:00 dlcentre3 sshd[1067711]: Invalid user ali from 64.112.42.149 port 32854
2026-09-24T06:30:59.528232+01:00 dlcentre3 sshd[1068199]: Invalid user odoo from 64.112.42.149 port 37286
2026-09-24T06:32:33.415778+01:00 dlcentre3 sshd[1068395]: Invalid user danny from 64.112.42.149 port 58012
show less
2026-09-24T06:05:49.274065+01:00 dlcentre3 sshd[1061576]: Invalid user vision from 64.112.42.149 por ...
show more2026-09-24T06:05:49.274065+01:00 dlcentre3 sshd[1061576]: Invalid user vision from 64.112.42.149 port 44908
2026-09-24T06:10:04.307243+01:00 dlcentre3 sshd[1062899]: Invalid user app from 64.112.42.149 port 39242
2026-09-24T06:14:53.042970+01:00 dlcentre3 sshd[1063761]: Invalid user myuser from 64.112.42.149 port 41430
show less
Multiple SSH login attempts from 64.112.42.149 targeting user(s): app,root | Server Managed by Focus ...
show moreMultiple SSH login attempts from 64.112.42.149 targeting user(s): app,root | Server Managed by Focusnic
show less
2026-09-24T06:01:44.190632maoyue-lax1 sshd[531674]: Invalid user vision from 64.112.42.149 port 4159 ...
show more2026-09-24T06:01:44.190632maoyue-lax1 sshd[531674]: Invalid user vision from 64.112.42.149 port 41590
2026-09-24T06:01:44.230633maoyue-lax1 sshd[531674]: Disconnected from invalid user vision 64.112.42.149 port 41590 [preauth]
2026-09-24T06:07:44.534945maoyue-lax1 sshd[533782]: Disconnected from authenticating user root 64.112.42.149 port 46652 [preauth]
2026-09-24T06:09:22.973515maoyue-lax1 sshd[533862]: Invalid user app from 64.112.42.149 port 54618
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
2026-09-24T01:23:15.186765-03:00 vps sshd[4178661]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-09-24T01:23:15.186765-03:00 vps sshd[4178661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.112.42.149
2026-09-24T01:23:17.165225-03:00 vps sshd[4178661]: Failed password for invalid user admin from 64.112.42.149 port 40814 ssh2
2026-09-24T01:25:01.404587-03:00 vps sshd[4178944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.112.42.149 user=root
2026-09-24T01:25:03.606253-03:00 vps sshd[4178944]: Failed password for root from 64.112.42.149 port 50520 ssh2
2026-09-24T01:26:39.254327-03:00 vps sshd[4179481]: Invalid user stas from 64.112.42.149 port 45884
...
show less
Brute-Force
SSH
Anonymous
Sep 24 06:21:48 gateway1-old sshd[10923]: Failed password for root from 64.112.42.149 port 49340 ssh ...
show moreSep 24 06:21:48 gateway1-old sshd[10923]: Failed password for root from 64.112.42.149 port 49340 ssh2
Sep 24 06:24:16 gateway1-old sshd[11075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.112.42.149
Sep 24 06:24:18 gateway1-old sshd[11075]: Failed password for invalid user admin from 64.112.42.149 port 40150 ssh2
show less
