This IP address has been reported a total of
306
times from
192 distinct
sources.
103.56.149.49 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-03-01T12:03:51Z and 2026-03- ...
show moreCowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-03-01T12:03:51Z and 2026-03-01T12:26:22Z
show less
2026-03-01T12:20:31.040074+00:00 instance-20241105-1951 sshd[871941]: Disconnected from authenticati ...
show more2026-03-01T12:20:31.040074+00:00 instance-20241105-1951 sshd[871941]: Disconnected from authenticating user root 103.56.149.49 port 49640 [preauth]
...
show less
2026-03-01T12:03:52.936550+00:00 instance-20241105-1951 sshd[871548]: Disconnected from authenticati ...
show more2026-03-01T12:03:52.936550+00:00 instance-20241105-1951 sshd[871548]: Disconnected from authenticating user root 103.56.149.49 port 35062 [preauth]
...
show less
2026-03-01T13:34:56.730293+02:00 wels sshd[1212303]: Disconnected from authenticating user root 103. ...
show more2026-03-01T13:34:56.730293+02:00 wels sshd[1212303]: Disconnected from authenticating user root 103.56.149.49 port 58210 [preauth]
2026-03-01T13:38:19.289187+02:00 wels sshd[1212328]: Disconnected from authenticating user root 103.56.149.49 port 59740 [preauth]
2026-03-01T13:40:59.697351+02:00 wels sshd[1212382]: Disconnected from authenticating user root 103.56.149.49 port 33282 [preauth]
...
show less
2026-03-01T12:28:27.849107 ******* sshd[1129563]: Disconnected from authenticating user root 103.56. ...
show more2026-03-01T12:28:27.849107 ******* sshd[1129563]: Disconnected from authenticating user root 103.56.149.49 port 39448 [preauth]
2026-03-01T12:36:12.970645 ******* sshd[1131964]: Disconnected from authenticating user root 103.56.149.49 port 56372 [preauth]
2026-03-01T12:38:46.944318 ******* sshd[1132725]: Disconnected from authenticating user root 103.56.149.49 port 40734 [preauth]
show less
103.56.149.49 (ID/Indonesia/mediaviralterbaru2022.biz.id), 5 distributed sshd attacks on account [ro ...
show more103.56.149.49 (ID/Indonesia/mediaviralterbaru2022.biz.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 1 05:29:57 14827 sshd[525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.243.50.114 user=root
Mar 1 05:29:59 14827 sshd[525]: Failed password for root from 8.243.50.114 port 36240 ssh2
Mar 1 04:54:47 14827 sshd[30256]: Failed password for root from 209.38.120.66 port 60732 ssh2
Mar 1 05:33:17 14827 sshd[810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.56.149.49 user=root
Mar 1 05:33:18 14827 sshd[810]: Failed password for root from 103.56.149.49 port 50936 ssh2
IP Addresses Blocked:
8.243.50.114 (BR/Brazil/-)
209.38.120.66 (IN/India/-)
show less
Brute-Force
SSH
Showing 1 to
15
of 306 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩