This IP address has been reported a total of
47
times from
41 distinct
sources.
112.49.199.137 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-08-13T03:27:55.737811+00:00 sshd[22687]: Failed password for root from 112.49.199.137 port 421 ...
show more2026-08-13T03:27:55.737811+00:00 sshd[22687]: Failed password for root from 112.49.199.137 port 42114 ssh2
...
show less
2026-08-12T14:32:56.001828Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 112.49.199.137:375 ...
show more2026-08-12T14:32:56.001828Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 112.49.199.137:37536 (158.69.22.11:2222) [session: 5ab900887f22]
2026-08-12T14:32:58.360801Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 112.49.199.137:40858 (158.69.22.11:2222) [session: 8daf4a09b9cb]
...
show less
2026-08-12T02:15:25.165769+00:00 node1.eu sshd-session[27805]: pam_unix(sshd:auth): authentication f ...
show more2026-08-12T02:15:25.165769+00:00 node1.eu sshd-session[27805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.49.199.137 user=root
2026-08-12T02:15:27.262366+00:00 node1.eu sshd-session[27805]: Failed password for root from 112.49.199.137 port 32960 ssh2
2026-08-12T02:15:28.877260+00:00 node1.eu sshd-session[27805]: Connection closed by authenticating user root 112.49.199.137 port 32960 [preauth]
...
show less
2026-08-10T21:20:31.872028+01:00 frans sshd[1789182]: Failed password for root from 112.49.199.137 p ...
show more2026-08-10T21:20:31.872028+01:00 frans sshd[1789182]: Failed password for root from 112.49.199.137 port 33038 ssh2
2026-08-10T21:20:35.301651+01:00 frans sshd[1789201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.49.199.137 user=root
2026-08-10T21:20:36.775304+01:00 frans sshd[1789201]: Failed password for root from 112.49.199.137 port 33042 ssh2
...
show less
IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 112.49.199.137 at 2026-08-09 14:29: ...
show moreIN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 112.49.199.137 at 2026-08-09 14:29:37 EDT
show less
SSH credential brute-force observed by honeypot.
Source IP: 112.49.199.137
Targeted device: Ubuntu s ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 112.49.199.137
Targeted device: Ubuntu server
First seen: 09 Aug 2026 06:45:23 UTC
Last seen: 09 Aug 2026 06:45:25 UTC
Attempts: 2
Client: SSH-2.0-Go
Sample credentials: root:xefxbbxbf------fuck------, root:root123456
show less