This IP address has been reported a total of
32
times from
30 distinct
sources.
49.81.64.137 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 8
reports;
Germany
with 5
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Port Scan
25
times;
Hacking
7
times;
Brute-Force
7
times;
SQL Injection
3
times;
IoT Targeted
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 3306)
Source port: 43092
TTL: 113
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 3306)
Source port: 43092
TTL: 113
Packet length: 40
TOS: 0x08
This report (for 49.81.64.137) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
{"event":{"DateTime":"2026-10-08T18:28:17Z","RemoteAddr":"49.81.64.137:49624","Protocol":"TCP","Comm ...
show more{"event":{"DateTime":"2026-10-08T18:28:17Z","RemoteAddr":"49.81.64.137:49624","Protocol":"TCP","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New TCP attempt","ID":"90a271bc-5829-45d6-8745-d305cfdfeae2","Environ":"","User":"","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"Mysql 8.0.29","SourceIp":"49.81.64.137","SourcePort":"49624","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-10-08T18:28:18Z","RemoteAddr":"49.81.64.137:49695","Protocol":"TCP","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New TCP attempt","ID":"fd14e514-0041-4d74-b2d4-b8fe8b4c5f1d","Environ":"","User":"","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"Mysql 8.0.29","SourceIp":"49.81.64.137","SourcePort":"49695","TLSServer
show less
Honeypot Finding: credential brute-force against MySQL on TCP/3306; 62 authentication events observe ...
show moreHoneypot Finding: credential brute-force against MySQL on TCP/3306; 62 authentication events observed across 62 source port(s); target port(s): 3306.
show less
2026-10-08 5:23:45 314590063 [Warning] Access denied for user 'root'@'49.81.64.137' (using password ...
show more2026-10-08 5:23:45 314590063 [Warning] Access denied for user 'root'@'49.81.64.137' (using password: YES)
2026-10-08 5:23:48 314590095 [Warning] Access denied for user 'root'@'49.81.64.137' (using password: YES)
2026-10-08 5:23:48 314590099 [Warning] Access denied for user 'root'@'49.81.64.137' (using password: YES)
...
show less
Brute-Force
Anonymous
Blocked by firewall on hugin [3306/tcp] | Rule: UFW | SPT: 4972 | TTL: 115 | LEN: 40 | TOS: 0x00 • R ...
show moreBlocked by firewall on hugin [3306/tcp] | Rule: UFW | SPT: 4972 | TTL: 115 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan on Honeypot | Ports: 3306/MySQL | Proto: TCP(1) | Flags: all SYN | TTL: 101 | Len: 44B | W ...
show morePort Scan on Honeypot | Ports: 3306/MySQL | Proto: TCP(1) | Flags: all SYN | TTL: 101 | Len: 44B | Win: 16384(1) | F2B/ufw-honeypot@2026-10-08T03:20:40Z
show less
[02:05] Attempted MySQL login as 'root' (scramble=f29f976c51cf2981d6eac2ea097ab4295ed8de0a salt=c56e ...
show more[02:05] Attempted MySQL login as 'root' (scramble=f29f976c51cf2981d6eac2ea097ab4295ed8de0a salt=c56e9d306176ad32a3361b7e9e4d088f60e2f696)
show less
