This IP address has been reported a total of
476
times from
174 distinct
sources.
115.190.148.49 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
115.190.148.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ...
show more115.190.148.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 1 18:21:37 16327 sshd[6075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.253.26 user=root
Mar 1 18:21:39 16327 sshd[6075]: Failed password for root from 109.123.253.26 port 40346 ssh2
Mar 1 18:24:02 16327 sshd[6205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.253.26 user=root
Mar 1 19:20:42 16327 sshd[9956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.148.49 user=root
Mar 1 19:20:44 16327 sshd[9956]: Failed password for root from 115.190.148.49 port 53600 ssh2
IP Addresses Blocked:
109.123.253.26 (DE/Germany/vmi2920299.contaboserver.net)
show less
2026-02-28T13:27:21.635527-05:00 debian-8gb-ash-1 sshd[2562608]: Connection closed by authenticating ...
show more2026-02-28T13:27:21.635527-05:00 debian-8gb-ash-1 sshd[2562608]: Connection closed by authenticating user root 115.190.148.49 port 41604 [preauth]
...
show less
2026-02-19T10:28:57.643392alwww1 sshd[796671]: User root from 115.190.148.49 not allowed because not ...
show more2026-02-19T10:28:57.643392alwww1 sshd[796671]: User root from 115.190.148.49 not allowed because not listed in AllowUsers
2026-02-19T10:28:57.656264alwww1 sshd[796671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.148.49 user=root
2026-02-19T10:28:58.973836alwww1 sshd[796671]: Failed password for invalid user root from 115.190.148.49 port 57886 ssh2
2026-02-19T10:29:02.038439alwww1 sshd[796671]: Failed password for invalid user root from 115.190.148.49 port 57886 ssh2
...
show less
Blocked by UFW [2222/tcp]
Source port: 44158
TTL: 41
Packet length: 60
TOS: 0x00
This report was ge ...
show moreBlocked by UFW [2222/tcp]
Source port: 44158
TTL: 41
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less