This IP address has been reported a total of
21
times from
21 distinct
sources.
49.12.249.111 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United States of America
with 4
reports;
Canada
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
20
times;
SSH
17
times;
Port Scan
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 27 16:38:26 hecnet-us-east-gw sshd[2591064]: User root from 49.12.249.111 not allowed because no ...
show moreOct 27 16:38:26 hecnet-us-east-gw sshd[2591064]: User root from 49.12.249.111 not allowed because not listed in AllowUsers
Oct 27 16:38:28 hecnet-us-east-gw sshd[2591064]: Failed none for invalid user root from 49.12.249.111 port 35984 ssh2
Oct 27 16:38:32 hecnet-us-east-gw sshd[2591064]: Failed password for invalid user root from 49.12.249.111 port 35984 ssh2
...
show less
2026-10-27 19:16:22 Failed password for root from 49.12.249.111 port 52688 ssh2
2026-10-27 19:16:23 ...
show more2026-10-27 19:16:22 Failed password for root from 49.12.249.111 port 52688 ssh2
2026-10-27 19:16:23 rhost=49.12.249.111 user=root
show less
Oct 27 14:36:31 netserv400 sshd-session[319982]: Connection from 49.12.249.111 port 40880 on 94.102. ...
show moreOct 27 14:36:31 netserv400 sshd-session[319982]: Connection from 49.12.249.111 port 40880 on 94.102.210.190 port 22 rdomain ""
Oct 27 14:36:31 netserv400 sshd-session[319982]: User root from 49.12.249.111 not allowed because none of user's groups are listed in AllowGroups
Oct 27 14:36:31 netserv400 sshd-session[319984]: Connection from 49.12.249.111 port 40890 on 94.102.210.190 port 22 rdomain ""
Oct 27 14:36:31 netserv400 sshd-session[319984]: User root from 49.12.249.111 not allowed because none of user's groups are listed in AllowGroups
Oct 27 14:36:31 netserv400 sshd-session[319986]: Connection from 49.12.249.111 port 40896 on 94.102.210.190 port 22 rdomain ""
Oct 27 14:36:32 netserv400 sshd-session[319986]: User root from 49.12.249.111 not allowed because none of user's groups are listed in AllowGroups
Oct 27 14:36:32 netserv400 sshd-session[319988]: Connection from 49.12.249.111 port 40898 on 94.102.210.190 port 22 rdomain ""
Oct 27 14:36:32 netserv400 sshd-session[319988]: User
...
show less
49.12.249.111 (DE/Germany/static.111.249.12.49.clients.your-server.de), 5 distributed sshd attacks o ...
show more49.12.249.111 (DE/Germany/static.111.249.12.49.clients.your-server.de), 5 distributed sshd attacks on account [redacted]
show less
2026-10-27T20:16:27.422889+08:00 *hostname* sshd-session[442757]: Invalid user user from 49.12.249.1 ...
show more2026-10-27T20:16:27.422889+08:00 *hostname* sshd-session[442757]: Invalid user user from 49.12.249.111 port 57976
2026-10-27T20:16:27.789484+08:00 *hostname* sshd-session[442759]: Connection from 49.12.249.111 port 35510 on 10.89.160.7 port 22 rdomain ""
2026-10-27T20:16:29.049421+08:00 *hostname* sshd-session[442759]: Invalid user user from 49.12.249.111 port 35510
2026-10-27T20:16:46.467830+08:00 *hostname* sshd-session[442762]: Connection from 49.12.249.111 port 36128 on 10.89.160.7 port 22 rdomain ""
2026-10-27T20:16:46.990915+08:00 *hostname* sshd-session[442762]: Invalid user user from 49.12.249.111 port 36128
show less
2026-10-28T00:06:45+13:00 sshd[3612238]: Failed password for root from 49.12.249.111 port 54100 ssh ...
show more2026-10-28T00:06:45+13:00 sshd[3612238]: Failed password for root from 49.12.249.111 port 54100 ssh2
2026-10-28T00:06:49+13:00 sshd[3612240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.12.249.111 user=root
2026-10-28T00:06:51+13:00 sshd[3612240]: Failed password for root from 49.12.249.111 port 45712 ssh2
...
show less
Isolated honeypot recorded 3 SSH authentication attempts. Local block at 2026-10-27 09:54 UTC. Count ...
show moreIsolated honeypot recorded 3 SSH authentication attempts. Local block at 2026-10-27 09:54 UTC. Count is cumulative for the observed sequence, not an exact count within a time window.
show less
