This IP address has been reported a total of
26
times from
22 distinct
sources.
112.198.138.4 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 18 SSH credential attack (attempts) on 09-07-2026. For more information ...
show moreThis IP address carried out 18 SSH credential attack (attempts) on 09-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 75 port scanning attempts on 09-07-2026. For more information or to repo ...
show moreThis IP address carried out 75 port scanning attempts on 09-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Unwanted traffic detected by honeypot on July 08, 2026: port scans (1 port 22 scan), and brute force ...
show moreUnwanted traffic detected by honeypot on July 08, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (1 over ssh).
show less
This IP address carried out 80 port scanning attempts on 08-07-2026. For more information or to repo ...
show moreThis IP address carried out 80 port scanning attempts on 08-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 15 SSH credential attack (attempts) on 08-07-2026. For more information ...
show moreThis IP address carried out 15 SSH credential attack (attempts) on 08-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Honeypot favala.es: 1 intentos de login SSH por fuerza bruta; 1 comandos ejecutados tras acceder en ...
show moreHoneypot favala.es: 1 intentos de login SSH por fuerza bruta; 1 comandos ejecutados tras acceder en 24h. Reporte automático.
show less
Malicious activity from 112.198.138.4 detected by FDC honeypots. Categories: 14,15,22. 2 events in l ...
show moreMalicious activity from 112.198.138.4 detected by FDC honeypots. Categories: 14,15,22. 2 events in last 24h.
show less
Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: root:admin, root:pa ...
show moreHoneypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: root:admin, root:password
• Number of login attempts: 2
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot [uk-production01]: Brute-force attack detected on 22/SSH
• Credential used: root:admin
• Nu ...
show moreHoneypot [uk-production01]: Brute-force attack detected on 22/SSH
• Credential used: root:admin
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:admin, roo ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:admin, root:password, root:root
• Number of login attempts: 3
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
show less
Brute-Force
SSH
Hacking
Showing 1 to
15
of 26 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩