This IP address has been reported a total of
1,021
times from
532 distinct
sources.
159.223.213.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-03T14:52:47.710772+00:00 nosvoid.com sshd[1560713]: Failed password for root from 159.223.21 ...
show more2026-06-03T14:52:47.710772+00:00 nosvoid.com sshd[1560713]: Failed password for root from 159.223.213.49 port 34582 ssh2
2026-06-03T14:54:28.773883+00:00 nosvoid.com sshd[1563859]: Invalid user appuser from 159.223.213.49 port 44360
2026-06-03T14:54:28.777910+00:00 nosvoid.com sshd[1563859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.213.49
2026-06-03T14:54:30.074652+00:00 nosvoid.com sshd[1563859]: Failed password for invalid user appuser from 159.223.213.49 port 44360 ssh2
2026-06-03T14:56:07.703656+00:00 nosvoid.com sshd[1566956]: Invalid user sean from 159.223.213.49 port 48356
...
show less
2026-06-03T14:16:45.837154+00:00 ubuntu-4gb-hel1-1 sshd[3779860]: Invalid user admin from 159.223.21 ...
show more2026-06-03T14:16:45.837154+00:00 ubuntu-4gb-hel1-1 sshd[3779860]: Invalid user admin from 159.223.213.49 port 33970
2026-06-03T14:16:45.881130+00:00 ubuntu-4gb-hel1-1 sshd[3779860]: Disconnected from invalid user admin 159.223.213.49 port 33970 [preauth]
2026-06-03T14:18:26.395874+00:00 ubuntu-4gb-hel1-1 sshd[3779976]: Invalid user user1 from 159.223.213.49 port 55336
2026-06-03T14:18:26.432776+00:00 ubuntu-4gb-hel1-1 sshd[3779976]: Disconnected from invalid user user1 159.223.213.49 port 55336 [preauth]
2026-06-03T14:20:05.145786+00:00 ubuntu-4gb-hel1-1 sshd[3780009]: Disconnected from authenticating user root 159.223.213.49 port 34560 [preauth]
...
show less
2026-06-03T13:47:22.672498+00:00 ubuntu-4gb-hel1-1 sshd[3778572]: Disconnected from authenticating u ...
show more2026-06-03T13:47:22.672498+00:00 ubuntu-4gb-hel1-1 sshd[3778572]: Disconnected from authenticating user root 159.223.213.49 port 48040 [preauth]
2026-06-03T13:49:02.707009+00:00 ubuntu-4gb-hel1-1 sshd[3778610]: Invalid user cloud from 159.223.213.49 port 50268
2026-06-03T13:49:02.745384+00:00 ubuntu-4gb-hel1-1 sshd[3778610]: Disconnected from invalid user cloud 159.223.213.49 port 50268 [preauth]
2026-06-03T13:50:50.908881+00:00 ubuntu-4gb-hel1-1 sshd[3778679]: Invalid user vpsuser from 159.223.213.49 port 39450
2026-06-03T13:50:50.943024+00:00 ubuntu-4gb-hel1-1 sshd[3778679]: Disconnected from invalid user vpsuser 159.223.213.49 port 39450 [preauth]
...
show less
2026-06-03T10:48:57.568290-03:00 pve sshd[4171035]: Invalid user cloud from 159.223.213.49 port 4996 ...
show more2026-06-03T10:48:57.568290-03:00 pve sshd[4171035]: Invalid user cloud from 159.223.213.49 port 49968
show less
2026-06-03T14:34:16.093742+02:00 gw-de17-01.guestgw.net sshd[319333]: Disconnected from authenticati ...
show more2026-06-03T14:34:16.093742+02:00 gw-de17-01.guestgw.net sshd[319333]: Disconnected from authenticating user root 159.223.213.49 port 59530 [preauth]
2026-06-03T14:36:02.062024+02:00 gw-de17-01.guestgw.net sshd[319947]: Invalid user pa from 159.223.213.49 port 36096
2026-06-03T14:36:02.184734+02:00 gw-de17-01.guestgw.net sshd[319947]: Disconnected from invalid user pa 159.223.213.49 port 36096 [preauth]
2026-06-03T14:37:44.302129+02:00 gw-de17-01.guestgw.net sshd[320464]: Invalid user marketing from 159.223.213.49 port 50640
2026-06-03T14:37:44.366233+02:00 gw-de17-01.guestgw.net sshd[320464]: Disconnected from invalid user marketing 159.223.213.49 port 50640 [preauth]
show less
(sshd) Failed SSH login from 159.223.213.49 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: ...
show more(sshd) Failed SSH login from 159.223.213.49 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 3 07:28:03 14474 sshd[14741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.213.49 user=root
Jun 3 07:28:05 14474 sshd[14741]: Failed password for root from 159.223.213.49 port 46198 ssh2
Jun 3 07:34:48 14474 sshd[15734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.213.49 user=root
Jun 3 07:34:50 14474 sshd[15734]: Failed password for root from 159.223.213.49 port 54446 ssh2
Jun 3 07:36:32 14474 sshd[16036]: Invalid user pa from 159.223.213.49 port 47036
show less
2026-06-03T10:12:11.620080+00:00 de-fra2-git1 sshd[158037]: Invalid user ll from 159.223.213.49 port ...
show more2026-06-03T10:12:11.620080+00:00 de-fra2-git1 sshd[158037]: Invalid user ll from 159.223.213.49 port 41032
2026-06-03T10:25:13.492713+00:00 de-fra2-git1 sshd[163315]: Invalid user sal from 159.223.213.49 port 36054
2026-06-03T10:26:52.165878+00:00 de-fra2-git1 sshd[163931]: Invalid user postgres from 159.223.213.49 port 38548
...
show less
Jun 3 04:12:54 b146-61 sshd[395881]: Failed password for invalid user ll from 159.223.213.49 port 4 ...
show moreJun 3 04:12:54 b146-61 sshd[395881]: Failed password for invalid user ll from 159.223.213.49 port 42386 ssh2
Jun 3 04:22:08 b146-61 sshd[395975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.213.49 user=root
Jun 3 04:22:10 b146-61 sshd[395975]: Failed password for root from 159.223.213.49 port 40748 ssh2
...
show less
2026-06-03T08:48:51.192107+00:00 cirno sshd[1050895]: Failed password for invalid user pterodactyl f ...
show more2026-06-03T08:48:51.192107+00:00 cirno sshd[1050895]: Failed password for invalid user pterodactyl from 159.223.213.49 port 42086 ssh2
2026-06-03T08:50:24.358228+00:00 cirno sshd[1051136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.213.49 user=root
2026-06-03T08:50:26.522202+00:00 cirno sshd[1051136]: Failed password for root from 159.223.213.49 port 45294 ssh2
...
show less
2026-06-03T08:43:22.877262+00:00 xproot sshd[2187828]: Failed password for root from 159.223.213.49 ...
show more2026-06-03T08:43:22.877262+00:00 xproot sshd[2187828]: Failed password for root from 159.223.213.49 port 54194 ssh2
2026-06-03T08:45:00.615459+00:00 xproot sshd[2188319]: Invalid user server from 159.223.213.49 port 38328
2026-06-03T08:45:00.620108+00:00 xproot sshd[2188319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.213.49
2026-06-03T08:45:02.973699+00:00 xproot sshd[2188319]: Failed password for invalid user server from 159.223.213.49 port 38328 ssh2
2026-06-03T08:46:36.700263+00:00 xproot sshd[2188783]: Invalid user temp from 159.223.213.49 port 52392
...
show less
Brute-Force
SSH
Showing 46 to
60
of 1021 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩