64.236.200.80

Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.flipkart.com:443

Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.

Unauthorized connection attempt

RdpGuard detected brute-force attempt on HTTP

Blocked by UFW on MVI [2078/tcp] | SPT: 37697 | TTL: 46 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter

MultiHost/MultiPort Probe, Scan, Hack -

64.236.200.80 - - [02/Apr/2026:13:12:55 -0500] "CONNECT zainexwtf.xyz:443 HTTP/1.1" 502 488 "-" "-" 64.236.200.80 - - [02/Apr/2026:13:12:55 -0500] "CONNECT zainexwtf.xyz:443 HTTP/1.1" 502 488 "-" "-" ...

2026-02-01T13:59:19.120206+08:00 localhost sshd[193194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.200.80 user=root 2026-02-01T13:59:20.825830+08:00 localhost sshd[193194]: Failed password for roo ... show more 2026-02-01T13:59:19.120206+08:00 localhost sshd[193194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.200.80 user=root 2026-02-01T13:59:20.825830+08:00 localhost sshd[193194]: Failed password for root from 64.236.200.80 port 13312 ssh2 2026-02-01T13:59:21.942255+08:00 localhost sshd[193194]: Connection closed by authenticating user root 64.236.200.80 port 13312 [preauth] ... show less

2026-02-01T05:55:39.067975milloweb sshd[1429]: Failed password for root from 64.236.200.80 port 13312 ssh2 2026-02-01T06:01:55.147881milloweb sshd[2007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.2 ... show more 2026-02-01T05:55:39.067975milloweb sshd[1429]: Failed password for root from 64.236.200.80 port 13312 ssh2 2026-02-01T06:01:55.147881milloweb sshd[2007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.200.80 user=root 2026-02-01T06:01:56.717476milloweb sshd[2007]: Failed password for root from 64.236.200.80 port 13312 ssh2 ... show less

Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:1, root:12, root:123, root:1234 • Number of login attempts: 4 • 3 command(s) were executed during the session • Client: SSH-2.0-Go

2026-02-01T12:51:41.926739+08:00 localhost sshd[176056]: Connection closed by authenticating user root 64.236.200.80 port 13312 [preauth] 2026-02-01T12:57:53.665229+08:00 localhost sshd[177591]: pam_unix(sshd:auth): authentication failure; logname= u ... show more 2026-02-01T12:51:41.926739+08:00 localhost sshd[176056]: Connection closed by authenticating user root 64.236.200.80 port 13312 [preauth] 2026-02-01T12:57:53.665229+08:00 localhost sshd[177591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.200.80 user=root 2026-02-01T12:57:56.013389+08:00 localhost sshd[177591]: Failed password for root from 64.236.200.80 port 13312 ssh2 ... show less

2026-02-01T04:49:44.783596+00:00 edge-drt-chi02.int.pdx.net.uk sshd[2241973]: Failed password for root from 64.236.200.80 port 13312 ssh2 2026-02-01T04:53:05.610477+00:00 edge-drt-chi02.int.pdx.net.uk sshd[2242263]: pam_unix(sshd:auth): authenticatio ... show more 2026-02-01T04:49:44.783596+00:00 edge-drt-chi02.int.pdx.net.uk sshd[2241973]: Failed password for root from 64.236.200.80 port 13312 ssh2 2026-02-01T04:53:05.610477+00:00 edge-drt-chi02.int.pdx.net.uk sshd[2242263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.200.80 user=root 2026-02-01T04:53:07.948131+00:00 edge-drt-chi02.int.pdx.net.uk sshd[2242263]: Failed password for root from 64.236.200.80 port 13312 ssh2 ... show less

Feb 1 04:49:00 uptime-kuma sshd[2482657]: Connection closed by authenticating user root 64.236.200.80 port 13312 [preauth] ...

Excessive crawling/scraping

ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/64.236.200.80