CA03-SC-MON: SSH Brute Force from 64.225.75.49 at 2025-12-28 13:49:47 IST
Brute-Force
SSH
Anonymous
Dec 25 01:46:23 wm1 sshd[1273964]: Invalid user www from 64.225.75.49 port 38958
Dec 25 01:47:11 wm1 sshd[1274020]: Invalid user www from 64.225.75.49 port 34582
Dec 25 01:47:54 wm1 sshd[1274076]: Invalid user www from 64.225.75.49 port 45214
Dec 25 ...
show moreDec 25 01:46:23 wm1 sshd[1273964]: Invalid user www from 64.225.75.49 port 38958
Dec 25 01:47:11 wm1 sshd[1274020]: Invalid user www from 64.225.75.49 port 34582
Dec 25 01:47:54 wm1 sshd[1274076]: Invalid user www from 64.225.75.49 port 45214
Dec 25 01:48:36 wm1 sshd[1274346]: Invalid user www from 64.225.75.49 port 50330
Dec 25 01:49:19 wm1 sshd[1274400]: Invalid user test1 from 64.225.75.49 port 44840
...
show less
Brute-Force
Anonymous
Dec 25 01:18:51 wm1 sshd[1268681]: Invalid user git from 64.225.75.49 port 46848
Dec 25 01:19:40 wm1 sshd[1268744]: Invalid user git from 64.225.75.49 port 47462
Dec 25 01:20:31 wm1 sshd[1268880]: Invalid user git from 64.225.75.49 port 50540
Dec 25 ...
show moreDec 25 01:18:51 wm1 sshd[1268681]: Invalid user git from 64.225.75.49 port 46848
Dec 25 01:19:40 wm1 sshd[1268744]: Invalid user git from 64.225.75.49 port 47462
Dec 25 01:20:31 wm1 sshd[1268880]: Invalid user git from 64.225.75.49 port 50540
Dec 25 01:21:19 wm1 sshd[1268972]: Invalid user git from 64.225.75.49 port 43034
Dec 25 01:22:08 wm1 sshd[1269063]: Invalid user git from 64.225.75.49 port 52708
...
show less
Brute-Force
Anonymous
Dec 25 01:02:41 wm1 sshd[1264812]: Invalid user hadoop from 64.225.75.49 port 41050
Dec 25 01:03:29 wm1 sshd[1265089]: Invalid user hadoop from 64.225.75.49 port 37794
Dec 25 01:04:20 wm1 sshd[1265194]: Invalid user hadoop from 64.225.75.49 port 4389 ...
show moreDec 25 01:02:41 wm1 sshd[1264812]: Invalid user hadoop from 64.225.75.49 port 41050
Dec 25 01:03:29 wm1 sshd[1265089]: Invalid user hadoop from 64.225.75.49 port 37794
Dec 25 01:04:20 wm1 sshd[1265194]: Invalid user hadoop from 64.225.75.49 port 43892
Dec 25 01:05:10 wm1 sshd[1265318]: Invalid user hadoop from 64.225.75.49 port 60010
Dec 25 01:06:02 wm1 sshd[1265392]: Invalid user hadoop from 64.225.75.49 port 60784
...
show less
Dec 25 00:50:21 host2 sshd[3595638]: Invalid user zabbix from 64.225.75.49 port 46162
Dec 25 00:50:23 host2 sshd[3595638]: Failed password for invalid user zabbix from 64.225.75.49 port 46162 ssh2
Dec 25 00:50:21 host2 sshd[3595638]: pam_unix(sshd:au ...
show moreDec 25 00:50:21 host2 sshd[3595638]: Invalid user zabbix from 64.225.75.49 port 46162
Dec 25 00:50:23 host2 sshd[3595638]: Failed password for invalid user zabbix from 64.225.75.49 port 46162 ssh2
Dec 25 00:50:21 host2 sshd[3595638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.75.49
Dec 25 00:50:21 host2 sshd[3595638]: Invalid user zabbix from 64.225.75.49 port 46162
Dec 25 00:50:23 host2 sshd[3595638]: Failed password for invalid user zabbix from 64.225.75.49 port 46162 ssh2
...
show less
Brute-Force
SSH
Anonymous
Dec 25 00:35:56 wm1 sshd[1259112]: Invalid user oracle from 64.225.75.49 port 51642
Dec 25 00:36:43 wm1 sshd[1259188]: Invalid user oracle from 64.225.75.49 port 60234
Dec 25 00:37:28 wm1 sshd[1259264]: Invalid user oracle from 64.225.75.49 port 5018 ...
show moreDec 25 00:35:56 wm1 sshd[1259112]: Invalid user oracle from 64.225.75.49 port 51642
Dec 25 00:36:43 wm1 sshd[1259188]: Invalid user oracle from 64.225.75.49 port 60234
Dec 25 00:37:28 wm1 sshd[1259264]: Invalid user oracle from 64.225.75.49 port 50182
Dec 25 00:38:13 wm1 sshd[1259522]: Invalid user oracle from 64.225.75.49 port 53666
Dec 25 00:38:57 wm1 sshd[1259593]: Invalid user postgres from 64.225.75.49 port 56186
...
show less
Dec 25 00:09:03 wm1 sshd[1249651]: Invalid user admin from 64.225.75.49 port 40550
Dec 25 00:09:53 wm1 sshd[1249963]: Invalid user admin from 64.225.75.49 port 51550
Dec 25 00:10:46 wm1 sshd[1250139]: Invalid user admin from 64.225.75.49 port 40534
D ...
show moreDec 25 00:09:03 wm1 sshd[1249651]: Invalid user admin from 64.225.75.49 port 40550
Dec 25 00:09:53 wm1 sshd[1249963]: Invalid user admin from 64.225.75.49 port 51550
Dec 25 00:10:46 wm1 sshd[1250139]: Invalid user admin from 64.225.75.49 port 40534
Dec 25 00:11:39 wm1 sshd[1250200]: Invalid user admin from 64.225.75.49 port 40348
Dec 25 00:12:29 wm1 sshd[1250451]: Invalid user admin from 64.225.75.49 port 53172
...
show less
Dec 24 23:52:04 host2 sshd[3592449]: Failed password for root from 64.225.75.49 port 57184 ssh2
Dec 24 23:52:53 host2 sshd[3592599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.75.49 user=root
Dec 2 ...
show moreDec 24 23:52:04 host2 sshd[3592449]: Failed password for root from 64.225.75.49 port 57184 ssh2
Dec 24 23:52:53 host2 sshd[3592599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.75.49 user=root
Dec 24 23:52:56 host2 sshd[3592599]: Failed password for root from 64.225.75.49 port 52512 ssh2
Dec 24 23:53:42 host2 sshd[3592615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.75.49 user=root
Dec 24 23:53:44 host2 sshd[3592615]: Failed password for root from 64.225.75.49 port 40438 ssh2
...
show less
Dec 24 22:49:56 v3 sshd[3755773]: Failed password for invalid user root from 64.225.75.49 port 34304 ssh2
Dec 24 22:50:48 v3 sshd[3755787]: User root from 64.225.75.49 not allowed because not listed in AllowUsers
Dec 24 22:50:48 v3 sshd[3755787]: pam ...
show moreDec 24 22:49:56 v3 sshd[3755773]: Failed password for invalid user root from 64.225.75.49 port 34304 ssh2
Dec 24 22:50:48 v3 sshd[3755787]: User root from 64.225.75.49 not allowed because not listed in AllowUsers
Dec 24 22:50:48 v3 sshd[3755787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.75.49 user=root
Dec 24 22:50:51 v3 sshd[3755787]: Failed password for invalid user root from 64.225.75.49 port 39264 ssh2
Dec 24 22:51:40 v3 sshd[3755800]: User root from 64.225.75.49 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown