Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
64.23.157.241 has been reported 91
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
/var/log/auth.log.1:Mar 2 01:57:32 debian sshd[31290]: Connection closed by authenticating user root 64.23.157.241 port 41404 [preauth] /var/log/auth.log.1:Mar 2 01:58:11 debian sshd[31307]: Connection closed by authenticating user root 64.23.157.2 ...
show more/var/log/auth.log.1:Mar 2 01:57:32 debian sshd[31290]: Connection closed by authenticating user root 64.23.157.241 port 41404 [preauth] /var/log/auth.log.1:Mar 2 01:58:11 debian sshd[31307]: Connection closed by authenticating user root 64.23.157.241 port 48690 [preauth] /var/log/auth.log.1:Mar 2 01:58:51 debian sshd[31318]: Connection closed by authenticating user root 64.23.157.241 port 34190 [preauth]
show less
Mar 2 01:56:09 debian sshd[31268]: Connection closed by authenticating user root 64.23.157.241 port 55182 [preauth] Mar 2 01:56:51 debian sshd[31280]: Connection closed by authenticating user root 64.23.157.241 port 35716 [preauth] Mar 2 01:57:32 ...
show moreMar 2 01:56:09 debian sshd[31268]: Connection closed by authenticating user root 64.23.157.241 port 55182 [preauth] Mar 2 01:56:51 debian sshd[31280]: Connection closed by authenticating user root 64.23.157.241 port 35716 [preauth] Mar 2 01:57:32 debian sshd[31290]: Connection closed by authenticating user root 64.23.157.241 port 41404 [preauth] Mar 2 01:58:11 debian sshd[31307]: Connection closed by authenticating user root 64.23.157.241 port 48690 [preauth] Mar 2 01:58:51 debian sshd[31318]: Connection closed by authenticating user root 64.23.157.241 port 34190 [preauth]
show less
2026-03-01T18:49:14.927391+01:00 gXdNODE2 sshd-session[1029561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.23.157.241 user=root
2026-03-01T18:49:17.100477+01:00 gXdNODE2 sshd-session[1029561]: Failed ...
show more2026-03-01T18:49:14.927391+01:00 gXdNODE2 sshd-session[1029561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.23.157.241 user=root
2026-03-01T18:49:17.100477+01:00 gXdNODE2 sshd-session[1029561]: Failed password for root from 64.23.157.241 port 54234 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-03-01T18:46:12.173436+01:00 hvs sshd-session[118905]: Connection closed by authenticating user root 64.23.157.241 port 60144 [preauth]
2026-03-01T18:46:53.442259+01:00 hvs sshd-session[118930]: Connection closed by authenticating user root 64.23 ...
show more2026-03-01T18:46:12.173436+01:00 hvs sshd-session[118905]: Connection closed by authenticating user root 64.23.157.241 port 60144 [preauth]
2026-03-01T18:46:53.442259+01:00 hvs sshd-session[118930]: Connection closed by authenticating user root 64.23.157.241 port 58370 [preauth]
2026-03-01T18:47:34.647039+01:00 hvs sshd-session[118948]: Connection closed by authenticating user root 64.23.157.241 port 34946 [preauth]
2026-03-01T18:48:16.946837+01:00 hvs sshd-session[118956]: Connection closed by authenticating user root 64.23.157.241 port 33914 [preauth]
2026-03-01T18:48:59.906299+01:00 hvs sshd-session[118966]: Connection closed by authenticating user root 64.23.157.241 port 40160 [preauth]
...
show less
2026-03-01T17:40:38.599945+00:00 s10925611 sshd[2085170]: User root from 64.23.157.241 not allowed because not listed in AllowUsers
2026-03-01T17:41:21.608445+00:00 s10925611 sshd[2085467]: User root from 64.23.157.241 not allowed because not listed ...
show more2026-03-01T17:40:38.599945+00:00 s10925611 sshd[2085170]: User root from 64.23.157.241 not allowed because not listed in AllowUsers
2026-03-01T17:41:21.608445+00:00 s10925611 sshd[2085467]: User root from 64.23.157.241 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown