This IP address has been reported a total of
4,660
times from
1,183 distinct
sources.
109.49.23.192 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-04-10T18:25:34.316853-04:00 vps sshd[305259]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-04-10T18:25:34.316853-04:00 vps sshd[305259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192
2026-04-10T18:25:36.355225-04:00 vps sshd[305259]: Failed password for invalid user ubuntu from 109.49.23.192 port 59184 ssh2
2026-04-10T18:27:05.678429-04:00 vps sshd[305268]: Invalid user user from 109.49.23.192 port 39996
2026-04-10T18:27:05.687572-04:00 vps sshd[305268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192
2026-04-10T18:27:07.549657-04:00 vps sshd[305268]: Failed password for invalid user user from 109.49.23.192 port 39996 ssh2
...
show less
2026-04-10T21:39:54.000233+02:00 gw-de02-01.guestgw.net sshd[1064953]: Invalid user userone from 109 ...
show more2026-04-10T21:39:54.000233+02:00 gw-de02-01.guestgw.net sshd[1064953]: Invalid user userone from 109.49.23.192 port 52862
2026-04-10T21:39:54.097997+02:00 gw-de02-01.guestgw.net sshd[1064953]: Disconnected from invalid user userone 109.49.23.192 port 52862 [preauth]
2026-04-10T21:44:20.870082+02:00 gw-de02-01.guestgw.net sshd[1066387]: Disconnected from authenticating user root 109.49.23.192 port 47866 [preauth]
2026-04-10T21:45:46.782470+02:00 gw-de02-01.guestgw.net sshd[1066836]: Disconnected from authenticating user root 109.49.23.192 port 59210 [preauth]
2026-04-10T21:47:15.373776+02:00 gw-de02-01.guestgw.net sshd[1067353]: Invalid user ubuntu from 109.49.23.192 port 52256
show less
(sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the las ...
show more(sshd) Failed SSH login from 109.49.23.192 (PT/Portugal/a109-49-23-192.cpe.netcabo.pt): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 10 14:00:54 17558 sshd[28830]: Invalid user admin from 109.49.23.192 port 47944
Apr 10 14:00:56 17558 sshd[28830]: Failed password for invalid user admin from 109.49.23.192 port 47944 ssh2
Apr 10 14:03:51 17558 sshd[29107]: Invalid user fastuser from 109.49.23.192 port 39016
Apr 10 14:03:53 17558 sshd[29107]: Failed password for invalid user fastuser from 109.49.23.192 port 39016 ssh2
Apr 10 14:05:26 17558 sshd[29291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.49.23.192 user=root
show less
Brute-Force
SSH
Anonymous
2026-04-10T16:01:15.736435-03:00 vmi1230637 sshd[2249902]: Invalid user admin from 109.49.23.192 por ...
show more2026-04-10T16:01:15.736435-03:00 vmi1230637 sshd[2249902]: Invalid user admin from 109.49.23.192 port 33638
...
show less