This IP address has been reported a total of
396
times from
246 distinct
sources.
112.185.48.244 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-04T02:29:55.296170 EUR sshd[21041]: error: maximum authentication attempts exceeded for root ...
show more2026-06-04T02:29:55.296170 EUR sshd[21041]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 54206 ssh2 [preauth]
2026-06-04T02:29:55.296204 EUR sshd[21041]: Disconnecting: Too many authentication failures [preauth]
2026-06-04T02:30:12.771537 EUR sshd[21131]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 54648 ssh2 [preauth]
...
show less
2026-06-03T16:09:46.953377-07:00 goldcrest sshd[33562]: Failed password for root from 112.185.48.244 ...
show more2026-06-03T16:09:46.953377-07:00 goldcrest sshd[33562]: Failed password for root from 112.185.48.244 port 54814 ssh2
2026-06-03T16:09:50.572996-07:00 goldcrest sshd[33562]: Failed password for root from 112.185.48.244 port 54814 ssh2
2026-06-03T16:09:55.325988-07:00 goldcrest sshd[33562]: Failed password for root from 112.185.48.244 port 54814 ssh2
2026-06-03T16:10:00.486886-07:00 goldcrest sshd[33562]: Failed password for root from 112.185.48.244 port 54814 ssh2
...
show less
2026-06-04T03:29:49.166169+08:00 localhost sshd[3366829]: error: maximum authentication attempts exc ...
show more2026-06-04T03:29:49.166169+08:00 localhost sshd[3366829]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 50662 ssh2 [preauth]
2026-06-04T03:30:06.004649+08:00 localhost sshd[3367129]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 51102 ssh2 [preauth]
2026-06-04T03:30:25.075790+08:00 localhost sshd[3367488]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 51528 ssh2 [preauth]
...
show less
Jun 3 17:20:13 s1-jellyfish sshd[2587417]: Failed password for root from 112.185.48.244 port 53176 ...
show moreJun 3 17:20:13 s1-jellyfish sshd[2587417]: Failed password for root from 112.185.48.244 port 53176 ssh2
Jun 3 17:20:18 s1-jellyfish sshd[2587417]: Failed password for root from 112.185.48.244 port 53176 ssh2
...
show less
Brute-Force
SSH
Anonymous
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:admin, root:12345 ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:admin, root:12345, root:guest, root:123456
• Number of login attempts: 5
• 9 command(s) were executed during the session
• Client: SSH-2.0-libssh2_1.11.1
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-03 06:12:17 Failed password for root from 112.185.48.244 port 41644 ssh2
2026-06-03 06:12:21 ...
show more2026-06-03 06:12:17 Failed password for root from 112.185.48.244 port 41644 ssh2
2026-06-03 06:12:21 Failed password for root from 112.185.48.244 port 41644 ssh2
show less
2026-06-03T02:22:11.708447+00:00 vps-331c9132 sshd[2116624]: Failed password for root from 112.185.4 ...
show more2026-06-03T02:22:11.708447+00:00 vps-331c9132 sshd[2116624]: Failed password for root from 112.185.48.244 port 59204 ssh2
2026-06-03T02:22:16.070571+00:00 vps-331c9132 sshd[2116624]: Failed password for root from 112.185.48.244 port 59204 ssh2
2026-06-03T02:22:19.547435+00:00 vps-331c9132 sshd[2116624]: Failed password for root from 112.185.48.244 port 59204 ssh2
...
show less
Jun 2 19:06:03 fail2ban sshd[3675089]: Failed password for root from 112.185.48.244 port 53664 ssh2 ...
show moreJun 2 19:06:03 fail2ban sshd[3675089]: Failed password for root from 112.185.48.244 port 53664 ssh2
Jun 2 19:06:23 fail2ban sshd[3675089]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 53664 ssh2 [preauth]
...
show less
2026-06-02T18:51:02.241Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-06-02T18:51:02.241Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 112.185.48.244.
show less
2026-06-02T20:05:05.609545+02:00 nl2.cbz.pw sshd-session[647215]: error: maximum authentication atte ...
show more2026-06-02T20:05:05.609545+02:00 nl2.cbz.pw sshd-session[647215]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 60298 ssh2 [preauth]
2026-06-02T20:05:25.153141+02:00 nl2.cbz.pw sshd-session[647220]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 60752 ssh2 [preauth]
2026-06-02T20:05:42.722515+02:00 nl2.cbz.pw sshd-session[647224]: error: maximum authentication attempts exceeded for root from 112.185.48.244 port 32954 ssh2 [preauth]
2026-06-02T20:06:05.528226+02:00 nl2.cbz.pw sshd-session[647229]: Invalid user admin from 112.185.48.244 port 33628
2026-06-02T20:06:12.424602+02:00 nl2.cbz.pw sshd-session[647229]: error: maximum authentication attempts exceeded for invalid user admin from 112.185.48.244 port 33628 ssh2 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 396 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩