64.225.64.180

Phishing impersonating Bitwarden, confirmed by the reporting analyst. Associated URL(s): http://64.225.64.180/; https://64.225.64.180/. Observation date confirmed by analyst: 2026-10-22; exact observation time not recorded.

Phishing activity observed at http://64.225.64.180/

The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’ ... show more The reported IP addresses are hosting phishing pages that impersonate Bitwarden by mimicking its official login interface to trick users into entering sensitive credentials. This activity involves credential harvesting, unauthorized use of Bitwarden’s branding, and poses a serious risk of account compromise and data theft. Immediate investigation and takedown are requested. show less

T-Pot honeypot | Honeytrap: port 8081

Web attack/malicious scanning detected

list.rtbh.com.tr report: tcp/0

Failed password for root Jan 14 04:14:25 port 49352

2026-01-14T01:16:12.278751devel sshd[24086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T01:16:14.075349devel sshd[24086]: Failed password for root from 64.225.64.180 por ... show more 2026-01-14T01:16:12.278751devel sshd[24086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T01:16:14.075349devel sshd[24086]: Failed password for root from 64.225.64.180 port 54018 ssh2 show less

2026-01-14T04:14:32.019878+00:00 www.diamondaviators.net sshd-session[2202384]: Failed password for invalid user root from 64.225.64.180 port 34454 ssh2 2026-01-14T04:16:09.694500+00:00 www.diamondaviators.net sshd-session[2202478]: User root from 64 ... show more 2026-01-14T04:14:32.019878+00:00 www.diamondaviators.net sshd-session[2202384]: Failed password for invalid user root from 64.225.64.180 port 34454 ssh2 2026-01-14T04:16:09.694500+00:00 www.diamondaviators.net sshd-session[2202478]: User root from 64.225.64.180 not allowed because not listed in AllowUsers 2026-01-14T04:16:09.709594+00:00 www.diamondaviators.net sshd-session[2202478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T04:16:11.594182+00:00 www.diamondaviators.net sshd-session[2202478]: Failed password for invalid user root from 64.225.64.180 port 34102 ssh2 ... show less

Failed password for root Jan 14 02:01:41 port 49224

2026-01-14T03:23:44.751920+00:00 www.diamondaviators.net sshd-session[2199867]: Failed password for invalid user root from 64.225.64.180 port 44132 ssh2 2026-01-14T03:25:22.803414+00:00 www.diamondaviators.net sshd-session[2199964]: User root from 64 ... show more 2026-01-14T03:23:44.751920+00:00 www.diamondaviators.net sshd-session[2199867]: Failed password for invalid user root from 64.225.64.180 port 44132 ssh2 2026-01-14T03:25:22.803414+00:00 www.diamondaviators.net sshd-session[2199964]: User root from 64.225.64.180 not allowed because not listed in AllowUsers 2026-01-14T03:25:22.816119+00:00 www.diamondaviators.net sshd-session[2199964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T03:25:24.628238+00:00 www.diamondaviators.net sshd-session[2199964]: Failed password for invalid user root from 64.225.64.180 port 54716 ssh2 ... show less

2026-01-14T02:50:06.760843+00:00 www.diamondaviators.net sshd-session[2198095]: Failed password for invalid user root from 64.225.64.180 port 52260 ssh2 2026-01-14T02:51:44.834627+00:00 www.diamondaviators.net sshd-session[2198207]: User root from 64 ... show more 2026-01-14T02:50:06.760843+00:00 www.diamondaviators.net sshd-session[2198095]: Failed password for invalid user root from 64.225.64.180 port 52260 ssh2 2026-01-14T02:51:44.834627+00:00 www.diamondaviators.net sshd-session[2198207]: User root from 64.225.64.180 not allowed because not listed in AllowUsers 2026-01-14T02:51:44.870417+00:00 www.diamondaviators.net sshd-session[2198207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T02:51:47.012393+00:00 www.diamondaviators.net sshd-session[2198207]: Failed password for invalid user root from 64.225.64.180 port 42990 ssh2 ... show less

ns3140968: SSH Brute Force from 64.225.64.180 at 2026-01-14 07:34:37 IST

2026-01-14T04:02:44.901283+02:00 vps sshd[2341159]: Failed password for root from 64.225.64.180 port 60376 ssh2 2026-01-14T04:03:22.729427+02:00 vps sshd[2341497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more 2026-01-14T04:02:44.901283+02:00 vps sshd[2341159]: Failed password for root from 64.225.64.180 port 60376 ssh2 2026-01-14T04:03:22.729427+02:00 vps sshd[2341497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T04:03:25.048838+02:00 vps sshd[2341497]: Failed password for root from 64.225.64.180 port 44308 ssh2 ... show less

2026-01-14T02:02:41.470781+00:00 tank sshd[300214]: Failed password for root from 64.225.64.180 port 58478 ssh2 2026-01-14T02:03:19.997855+00:00 tank sshd[300216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more 2026-01-14T02:02:41.470781+00:00 tank sshd[300214]: Failed password for root from 64.225.64.180 port 58478 ssh2 2026-01-14T02:03:19.997855+00:00 tank sshd[300216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.64.180 user=root 2026-01-14T02:03:21.906571+00:00 tank sshd[300216]: Failed password for root from 64.225.64.180 port 54012 ssh2 ... show less