AbuseIPDB » 1.194.49.238

1.194.49.238 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 63%: ?

63%

ISP	Henan Telecom Corporation
Usage Type	Fixed Line ISP
Domain Name	chinatelecom.com.cn
Country	China
City	Pingdingshan, Henan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 1.194.49.238

Whois 1.194.49.238

IP Abuse Reports for 1.194.49.238:

This IP address has been reported a total of 8 times from 7 distinct sources. 1.194.49.238 was first reported on April 6th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Anonymous	09 Apr 2021	Apr 9 15:33:35 kapalua sshd\[29498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid= ... show moreApr 9 15:33:35 kapalua sshd\[29498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.49.238 user=root Apr 9 15:33:37 kapalua sshd\[29498\]: Failed password for root from 1.194.49.238 port 36918 ssh2 Apr 9 15:33:38 kapalua sshd\[29500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.49.238 user=root Apr 9 15:33:39 kapalua sshd\[29500\]: Failed password for root from 1.194.49.238 port 37005 ssh2 Apr 9 15:33:41 kapalua sshd\[29508\]: Invalid user ubnt from 1.194.49.238 show less	Brute-Force SSH
EGP Abuse Dept	09 Apr 2021	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
IrisFlower	08 Apr 2021	Unauthorized connection attempt detected from IP address 1.194.49.238 to port 22 [T]	Port Scan
www.blocklist.de	08 Apr 2021	Apr 8 23:50:15 cow sshd[28373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreApr 8 23:50:15 cow sshd[28373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.49.238 Apr 8 23:50:15 cow sshd[28373]: Invalid user ubnt from 1.194.49.238 Apr 8 23:50:17 cow sshd[28373]: Failed password for invalid user ubnt from 1.194.49.238 port 39924 ssh2 Apr 8 23:50:19 cow sshd[28390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.49.238 user=r.r Apr 8 23:50:21 cow sshd[28390]: Failed password for r.r from 1.194.49.238 port 39975 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=1.194.49.238 show less	FTP Brute-Force Hacking
Webctf	08 Apr 2021	Apr 9 01:35:55 webctf sshd[2773436]: User root from 1.194.49.238 not allowed because not listed in ... show moreApr 9 01:35:55 webctf sshd[2773436]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:35:56 webctf sshd[2773438]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:35:58 webctf sshd[2773442]: Invalid user ubnt from 1.194.49.238 port 44121 Apr 9 01:35:59 webctf sshd[2773460]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:36:01 webctf sshd[2773462]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:36:02 webctf sshd[2773464]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:36:03 webctf sshd[2773466]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:36:05 webctf sshd[2773470]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:36:06 webctf sshd[2773492]: User root from 1.194.49.238 not allowed because not listed in AllowUsers Apr 9 01:36:07 webctf sshd ... show less	Brute-Force SSH
EGP Abuse Dept	07 Apr 2021	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
HBF	06 Apr 2021		Brute-Force SSH
icera-network.de	06 Apr 2021	Apr 6 09:20:01 jane sshd[15470]: Failed password for root from 1.194.49.238 port 49667 ssh2 . ... show moreApr 6 09:20:01 jane sshd[15470]: Failed password for root from 1.194.49.238 port 49667 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩