This IP address has been reported a total of
58
times from
47 distinct
sources.
49.228.104.140 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-02-01T12:59:06.178664+00:00 shrapnelnet sshd-session[2620702]: Invalid user ftpuser from 49.228 ...
show more2026-02-01T12:59:06.178664+00:00 shrapnelnet sshd-session[2620702]: Invalid user ftpuser from 49.228.104.140 port 45108
2026-02-01T12:59:15.848279+00:00 shrapnelnet sshd-session[2620741]: Invalid user xrdp from 49.228.104.140 port 54930
2026-02-01T12:59:35.892124+00:00 shrapnelnet sshd-session[2620960]: Invalid user ting from 49.228.104.140 port 34020
2026-02-01T12:59:45.231054+00:00 shrapnelnet sshd-session[2621041]: Invalid user docker from 49.228.104.140 port 46910
2026-02-01T12:59:53.871667+00:00 shrapnelnet sshd-session[2621054]: Invalid user minecraft from 49.228.104.140 port 51422
...
show less
Feb 1 13:43:52 nuremberg-1 sshd[31005]: Invalid user deploy from 49.228.104.140 port 59264
Feb 1 1 ...
show moreFeb 1 13:43:52 nuremberg-1 sshd[31005]: Invalid user deploy from 49.228.104.140 port 59264
Feb 1 13:44:05 nuremberg-1 sshd[31008]: Invalid user ohh from 49.228.104.140 port 48398
Feb 1 13:44:11 nuremberg-1 sshd[31010]: Invalid user svn from 49.228.104.140 port 48414
...
show less
2026-02-01T12:18:40.323365+00:00 sshadmin sshd-session[120227]: Invalid user rpc from 49.228.104.140 ...
show more2026-02-01T12:18:40.323365+00:00 sshadmin sshd-session[120227]: Invalid user rpc from 49.228.104.140 port 45910
2026-02-01T12:18:49.612264+00:00 sshadmin sshd-session[120229]: Invalid user minecraft from 49.228.104.140 port 56774
2026-02-01T12:19:00.159787+00:00 sshadmin sshd-session[120231]: Invalid user oracle from 49.228.104.140 port 35028
2026-02-01T12:19:10.078047+00:00 sshadmin sshd-session[120233]: Invalid user tomcat from 49.228.104.140 port 40444
2026-02-01T12:19:20.357852+00:00 sshadmin sshd-session[120235]: Invalid user sonia from 49.228.104.140 port 4024
...
show less
2026-02-01T07:05:27.596806+01:00 smvps001 sshd-session[234089]: Connection closed by 49.228.104.140 ...
show more2026-02-01T07:05:27.596806+01:00 smvps001 sshd-session[234089]: Connection closed by 49.228.104.140 port 43982 [preauth]
2026-02-01T07:07:03.582105+01:00 smvps001 sshd-session[234284]: Unable to negotiate with 49.228.104.140 port 53634: no matching cipher found. Their offer: arcfour,arcfour128,arcfour256,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,[email protected],3des-cbc,[email protected] [preauth]
...
show less
2026-02-01T05:59:23.362436+01:00 srv02 sshd[116343]: Invalid user git from 49.228.104.140 port 51928 ...
show more2026-02-01T05:59:23.362436+01:00 srv02 sshd[116343]: Invalid user git from 49.228.104.140 port 51928
2026-02-01T05:59:35.899403+01:00 srv02 sshd[116388]: Invalid user xrdp from 49.228.104.140 port 54134
2026-02-01T05:59:49.096038+01:00 srv02 sshd[116537]: Invalid user ting from 49.228.104.140 port 54014
...
show less
2026-02-01T05:13:31.776504+01:00 aurora sshd[671817]: Connection closed by 49.228.104.140 port 47698 ...
show more2026-02-01T05:13:31.776504+01:00 aurora sshd[671817]: Connection closed by 49.228.104.140 port 47698 [preauth]
...
show less
Brute-Force
Showing 1 to
15
of 58 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩