This IP address has been reported a total of
124
times from
70 distinct
sources.
212.113.109.222 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 7, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 7, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-09-14..2026-09-15. Reported by an SSH honeypot network; no production service involved.
show less
Blocked by UFW (TCP on 5904)
Source port: 40989
TTL: 235
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 5904)
Source port: 40989
TTL: 235
Packet length: 40
TOS: 0x08
This report (for 212.113.109.222) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 5908)
Source port: 40989
TTL: 235
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 5908)
Source port: 40989
TTL: 235
Packet length: 40
TOS: 0x08
This report (for 212.113.109.222) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
SSH authentication attack detected by honeypot [Vlux-Sensor-17] on port 22
• Observed: 2026-09-15T05 ...
show moreSSH authentication attack detected by honeypot [Vlux-Sensor-17] on port 22
• Observed: 2026-09-15T05:11:17.025Z
• Number of login attempts: 1
• Source ports: 35156
• Client: SSH-2.0-Go
• HASSH: 0a07365cc01fa9fc82608ba4019af499
• Submitted by Vlux-Sensor-17
show less
Blocked by UFW on amperetwo [5908/tcp]
Source port: 40989
TTL: 245
Packet length: 40
TOS: 0x00
This ...
show moreBlocked by UFW on amperetwo [5908/tcp]
Source port: 40989
TTL: 245
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[v5-99] Port scan: 3 packet(s) from 212.113.109.222 to 3 distinct destination ports (5905,22,5907) b ...
show more[v5-99] Port scan: 3 packet(s) from 212.113.109.222 to 3 distinct destination ports (5905,22,5907) blocked at the perimeter (automated sensor)
show less
Blocked by UFW (TCP on 5909)
Source port: 40989
TTL: 236
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 5909)
Source port: 40989
TTL: 236
Packet length: 40
TOS: 0x08
This report (for 212.113.109.222) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Sep 15 04:29:52 mail sshd[2809301]: Failed password for invalid user 1234567890 from 212.113.109.222 ...
show moreSep 15 04:29:52 mail sshd[2809301]: Failed password for invalid user 1234567890 from 212.113.109.222 port 57166 ssh2
Sep 15 04:30:14 mail sshd[2809306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.109.222 user=root
Sep 15 04:30:16 mail sshd[2809306]: Failed password for root from 212.113.109.222 port 58094 ssh2
...
show less
TCP portscan or auth bruteforce on ports: 5907 5908 ssh :
Firewall: Within 2026-09-14 14:07:28 - 202 ...
show moreTCP portscan or auth bruteforce on ports: 5907 5908 ssh :
Firewall: Within 2026-09-14 14:07:28 - 2026-09-14 22:30:23 CEST(+0200) identified: port scan from 212.113.109.222/32 on uncommon port/s: 22(ssh),5907(tcp:5907),5908(tcp:5908) (3 trials)
Fail2ban: Within 2026-09-14 14:07:28 - 2026-09-14 22:30:23 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive]
show less
Port Scan
Brute-Force
SSH
Showing 1 to
15
of 124 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩