This IP address has been reported a total of
11
times from
9 distinct
sources.
64.23.172.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 60000)
Source port: 61005
TTL: 245
Packet length: 44
TOS: 0x08
This report ( ...
show moreBlocked by UFW (TCP on 60000)
Source port: 61005
TTL: 245
Packet length: 44
TOS: 0x08
This report (for 64.23.172.252) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Connection to port 5000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155
Conne ...
show moreConnection to port 5000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155
Connection: keep-alive
sec-ch-ua: "Chromium";v="142", "Not:A-B
show less
{"level":"info","ts":1783192150.825746,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1783192150.825746,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"64.23.172.252","remote_port":"41624","client_ip":"64.23.172.252","proto":"HTTP/1.1","method":"GET","host":"tls2.updn.io:80","uri":"/","headers":{"Connection":["Upgrade"],"Sec-Websocket-Key":["L/noAszozA/bSMMaIgnkjw=="],"Origin":["http://tls2.updn.io:80/"],"Sec-Websocket-Version":["13"],"Upgrade":["websocket"]}},"bytes_read":0,"user_id":"","duration":0.000085783,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://tls2.updn.io/"],"Content-Type":[]}}
{"level":"info","ts":1783192151.838802,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"64.23.172.252","remote_port":"41628","client_ip":"64.23.172.252","proto":"HTTP/1.1","method":"GET","host":"tls2.updn.io:80","uri":"/ws","headers":{"Upgrade":["websocket"],"Connection":["Upgrade"],"Sec-Websocket-Key":["GaW5WipPyIvYBJLt4BGXPg=="],"Origin":["http:
...
show less
2026-07-04T19:18:40.611441+00:00 tls2 sshd[912717]: Invalid user advans from 64.23.172.252 port 5749 ...
show more2026-07-04T19:18:40.611441+00:00 tls2 sshd[912717]: Invalid user advans from 64.23.172.252 port 57492
2026-07-04T19:34:24.427389+00:00 tls2 sshd[913112]: Invalid user from 64.23.172.252 port 43932
2026-07-04T19:34:29.599494+00:00 tls2 sshd[913114]: Invalid user apc from 64.23.172.252 port 35090
2026-07-04T19:34:31.083872+00:00 tls2 sshd[913116]: Invalid user admin from 64.23.172.252 port 35098
2026-07-04T19:34:34.196631+00:00 tls2 sshd[913120]: Invalid user advanscanarysshuser from 64.23.172.252 port 35112
...
show less
Brute-Force
SSH
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩